PoCs Collection

Introduction

Welcome to my personal collection of Proof of Concepts (PoCs) crafted primarily for my enjoyment and to hone my cybersecurity skills. These tools were created as a part of my research and experimentation in security vulnerabilities and exploitation techniques.

Please note that although they are designed with care, I cannot guarantee flawless functionality across all environments or setups. These PoCs are provided solely for educational purposes to aid those interested in cybersecurity in learning about and understanding vulnerabilities and exploitation methods. I urge you to use them responsibly and within the bounds of legality.

Downloads

CVE ID Description Affected Software Affected Version DL GH
CVE-2024-27198 Creates an admin account on TeamCity, bypassing authentication. JetBrains TeamCity < 2023.11.4
CVE-2024-23897 Reads arbitrary files from Jenkins server filesystem. Jenkins ≤ 2.441 (LTS ≤ 2.426.2)