0day.today - La mayor base de datos de exploits en el mundo.
Things you should know about it:
We use one main domain DOMAIN_LINK
If you want to purchase the exploit or pay for service, you need to buy Gold. We don't want you to use our site as a tool for hacking purposes, so any kind of action that could affect illegaly other users or websites that you don't have right to access will be banned and your account including your data will be destroyed.
Administration of this site uses the official contacts. Beware of impostors!
We use one main domain DOMAIN_LINK
If you want to purchase the exploit or pay for service, you need to buy Gold. We don't want you to use our site as a tool for hacking purposes, so any kind of action that could affect illegaly other users or websites that you don't have right to access will be banned and your account including your data will be destroyed.
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!
Please, beware of scammers!
Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Enviar ] rules
- Visit the [ Preguntas frecuentes ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ [email protected] ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
No puedes contactar por:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
[ privado ]
0day.today Private exploits and 0day exploits Market
Zero-day exploits target zero-day vulnerabilities. Zero-day vulnerabilities are those for which no official patch has been released by the vendor. This means that no days [zero days] have elapsed between the time the vulnerability was discovered and the time an official patch was made available. Therefore, the administrators have had zero days to fix the flaw. It ceases to be a zero day once a fix is available.
Private category sells private Exploits and Vulnerabilities. Users can buy exploits using Gold [registered users] or using incognito mode [unregistered users], specify only mail to get material.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
Instagram bypass Access Account Private Method Exploit
calificar alto:
0
calificar bajo:
0
Comentarios:
49
60 460
Security Risk Critical
D
Download
V
Contains video proof
Verified by
0.028
Open this exploit for 0.028 BTC
Open this exploit for 2 000 GOLD
smokzz
Exploits:
8
BusinessLevel:
6
Twitter reset account Private Method 0day Exploit
calificar alto:
0
calificar bajo:
0
Comentarios:
21
25 995
Security Risk Critical
D
Download
-
Verified by
0.028
Open this exploit for 0.028 BTC
Open this exploit for 2 000 GOLD
0day Today Team
Exploits:
291
BusinessLevel:
31
WordPress 5.9.0 core Remote Code Execution 0day Exploit
calificar alto:
0
calificar bajo:
0
Comentarios:
23
33 921
Security Risk Critical
D
Download
-
Verified by
0.1
Open this exploit for 0.1 BTC
Open this exploit for 7 000 GOLD
smokzz
Exploits:
8
BusinessLevel:
6
Hotmail.com reset account 0day Exploit
calificar alto:
0
calificar bajo:
0
Comentarios:
26
24 249
Security Risk Critical
%
Open this exploit for 0.043 0.037 BTC
Open this exploit for 3 000 2 600 GOLD
-
Verified by
0.037
Open this exploit for 0.043 0.037 BTC
Open this exploit for 3 000 2 600 GOLD
0day Today Team
Exploits:
291
BusinessLevel:
31
VMware Cloud Director - Bypass identity verification Exploit
calificar alto:
0
calificar bajo:
0
Comentarios:
0
8 462
Security Risk Critical
D
Download
C
CVE-2023-34060
Verified by
0.028
Open this exploit for 0.028 BTC
Open this exploit for 2 000 GOLD
absholi7ly
Exploits:
1
BusinessLevel:
0
Moodle 4.3 Remote Code Execution 0day Exploit
calificar alto:
0
calificar bajo:
0
Comentarios:
0
8 862
Security Risk Critical
D
Download
-
Verified by
0.036
Open this exploit for 0.036 BTC
Open this exploit for 2 500 GOLD
smokzz
Exploits:
8
BusinessLevel:
6
TP-Link ER605 Unauthent LAN-side Remote Code Execution Exploit
calificar alto:
0
calificar bajo:
0
Comentarios:
0
9 006
Security Risk Critical
D
Download
V
Contains video proof
Verified by
0.021
Open this exploit for 0.021 BTC
Open this exploit for 1 500 GOLD
lychain1337
Exploits:
1
BusinessLevel:
0
Microsoft Outlook Remote Code Execution 0day Exploit
calificar alto:
0
calificar bajo:
0
Comentarios:
0
15 947
Security Risk Critical
D
Download
-
Verified by
0.114
Open this exploit for 0.114 BTC
Open this exploit for 8 000 GOLD
Protocol.8
Exploits:
5
BusinessLevel:
5
Powershell Code Arbitary Execution Builder FUD Exploit
calificar alto:
0
calificar bajo:
0
Comentarios:
0
18 230
Security Risk Critical
D
Download
-
Verified by
0.014
Open this exploit for 0.014 BTC
Open this exploit for 1 000 GOLD
viper_8080
Exploits:
5
BusinessLevel:
1
Microsoft Office Excel Silent Builder Exploit
calificar alto:
0
calificar bajo:
0
Comentarios:
0
19 113
Security Risk Critical
D
Download
-
Verified by
0.014
Open this exploit for 0.014 BTC
Open this exploit for 1 000 GOLD
viper_8080
Exploits:
5
BusinessLevel:
1
[ remote exploits ]
Remote exploits and vulnerabilities category
A "remote exploit" works over a network and exploits the security vulnerability without any prior access to the vulnerable system.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
50
Security Risk Critical
D
Download
-
Verified by
gratis
You can open this exploit for free
E1 Coders
Exploits:
1
BusinessLevel:
0
46
Security Risk High
D
Download
-
Verified by
gratis
You can open this exploit for free
semaja2
Exploits:
1
BusinessLevel:
0
47
Security Risk High
D
Download
-
Verified by
gratis
You can open this exploit for free
Sean Pesce
Exploits:
1
BusinessLevel:
0
OpenNMS Horizon 31.0.7 Remote Command Execution Exploit
Comentarios:
0
393
Security Risk Critical
D
Download
C
CVE-2023-0872
CVE-2023-40315
CVE-2023-40315
Verified by
gratis
You can open this exploit for free
metasploit
Exploits:
1616
BusinessLevel:
91
391
Security Risk Critical
D
Download
C
CVE-2023-24955
CVE-2023-29357
CVE-2023-29357
Verified by
gratis
You can open this exploit for free
metasploit
Exploits:
1616
BusinessLevel:
91
LBT-T300-mini1 - Remote Buffer Overflow Exploit
Comentarios:
0
374
Security Risk High
D
Download
-
Verified by
gratis
You can open this exploit for free
Amirhossein Bahramizadeh
Exploits:
20
BusinessLevel:
1
1 768
Security Risk Low
D
Download
C
CVE-2023-6538
Verified by
gratis
You can open this exploit for free
Arslan Masood
Exploits:
2
BusinessLevel:
0
GitLab CE/EE < 16.7.2 - Password Reset Vulnerability
Comentarios:
0
3 232
Security Risk Critical
D
Download
C
CVE-2023-7028
Verified by
gratis
You can open this exploit for free
0xB455
Exploits:
2
BusinessLevel:
1
2 878
Security Risk Critical
D
Download
C
CVE-2023-5702
CVE-2023-5222
CVE-2023-5222
Verified by
gratis
You can open this exploit for free
ByteHunter
Exploits:
5
BusinessLevel:
0
SolarView Compact 6.00 - Command Injection Exploit
Comentarios:
0
2 858
Security Risk Critical
D
Download
C
CVE-2023-23333
Verified by
gratis
You can open this exploit for free
ByteHunter
Exploits:
5
BusinessLevel:
0
[ local exploits ]
Local exploits and vulnerabilities category
A "local exploit" requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with client application.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
43
Security Risk High
D
Download
C
CVE-2023-32479
Verified by
gratis
You can open this exploit for free
Amirhossein Bahramizadeh
Exploits:
20
BusinessLevel:
1
vm2 - Sandbox Escape Exploit
Comentarios:
0
1 845
Security Risk Critical
D
Download
C
CVE-2023-37466
Verified by
gratis
You can open this exploit for free
Calil Khalil
Exploits:
1
BusinessLevel:
0
1 753
Security Risk High
D
Download
C
CVE-2024-1346
Verified by
gratis
You can open this exploit for free
Peter Gabaldon
Exploits:
2
BusinessLevel:
0
StimulusReflex 3.5.0 Arbitrary Code Execution Exploit
Comentarios:
0
2 412
Security Risk Critical
D
Download
C
CVE-2024-28121
Verified by
gratis
You can open this exploit for free
ixts
Exploits:
1
BusinessLevel:
0
KiTTY 0.76.1.13 - Command Injection Exploit
Comentarios:
0
2 708
Security Risk Critical
D
Download
C
CVE-2024-23749
Verified by
gratis
You can open this exploit for free
DEFCESCO
Exploits:
4
BusinessLevel:
0
2 640
Security Risk High
D
Download
Verified by
gratis
You can open this exploit for free
DEFCESCO
Exploits:
4
BusinessLevel:
0
2 637
Security Risk High
D
Download
C
CVE-2024-25003
Verified by
gratis
You can open this exploit for free
DEFCESCO
Exploits:
4
BusinessLevel:
0
Microsoft Windows Defender / Trojan.Win32/Powessere.G - Detection Mitigation Bypass Vulnerability
Comentarios:
0
3 312
Security Risk High
D
Download
-
Verified by
gratis
You can open this exploit for free
hyp3rlinx
Exploits:
253
BusinessLevel:
17
Saflok System 6000 Key Derivation Exploit
Comentarios:
0
4 499
Security Risk Low
D
Download
-
Verified by
gratis
You can open this exploit for free
bot
Exploits:
152
BusinessLevel:
13
4 707
Security Risk High
D
Download
-
Verified by
gratis
You can open this exploit for free
George Washington
Exploits:
1
BusinessLevel:
0
[ web applications ]
Webapplication (webapps) exploits and vulnerabilities category
This category is full with vulnerabilities, which was found in web projects and web applications.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
NodeBB v3.6.7 Broken Access Control Vulnerability
Comentarios:
0
47
Security Risk Critical
D
Download
-
Verified by
gratis
You can open this exploit for free
Vibhor Sharma
Exploits:
1
BusinessLevel:
0
Purei CMS 1.0 - SQL Injection Vulnerability
Comentarios:
0
43
Security Risk High
D
Download
-
Verified by
gratis
You can open this exploit for free
Number 7
Exploits:
11
BusinessLevel:
7
Workout Journal App 1.0 - Stored XSS Vulnerability
Comentarios:
0
44
Security Risk Medium
D
Download
C
CVE-2024-24050
Verified by
gratis
You can open this exploit for free
MURAT CAGRI ALIS
Exploits:
1
BusinessLevel:
0
433
Security Risk Critical
D
Download
C
CVE-2024-25600
Verified by
gratis
You can open this exploit for free
metasploit
Exploits:
1616
BusinessLevel:
91
Artica Proxy Unauthenticated PHP Deserialization Exploit
Comentarios:
0
343
Security Risk Critical
D
Download
C
CVE-2024-2054
Verified by
gratis
You can open this exploit for free
metasploit
Exploits:
1616
BusinessLevel:
91
LimeSurvey Community 5.3.32 - Stored XSS Vulnerability
Comentarios:
0
358
Security Risk Medium
D
Download
C
CVE-2024-24506
Verified by
gratis
You can open this exploit for free
Subhankar Singh
Exploits:
1
BusinessLevel:
0
Nagios XI Version 2024R1.01 - SQL Injection Exploit
Comentarios:
0
356
Security Risk High
D
Download
-
Verified by
gratis
You can open this exploit for free
Jarod Jaslow
Exploits:
1
BusinessLevel:
0
MobileShop master v1.0 - SQL Injection Vulnerability
Comentarios:
0
360
Security Risk High
D
Download
-
Verified by
gratis
You can open this exploit for free
HAZIM ARBAŞ
Exploits:
1
BusinessLevel:
0
350
Security Risk High
D
Download
-
Verified by
gratis
You can open this exploit for free
Hakkı TOKLU
Exploits:
1
BusinessLevel:
0
SPA-CART CMS - Stored XSS Vulnerability
Comentarios:
0
340
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Eren Sen
Exploits:
1
BusinessLevel:
0
[ dos / poc ]
DOS exploits and vulnerabilities category
PoC DoS (denial of service exploit) it exploits remote steps to check the resistance on the affected server or software denial of service vulnerability. The purpose of these attacks is to check the server or the software for resistance.
PoC (Proof Of Concept exploit) An attack against a computer or network that is performed only to prove that it can be done. It generally does not cause any harm, but shows how a hacker can take advantage of a vulnerability in the software or possibly the hardware.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
45
Security Risk Medium
D
Download
C
CVE-2024-27686
Verified by
gratis
You can open this exploit for free
ice-wzl
Exploits:
1
BusinessLevel:
0
TP-Link TL-WR740N - Buffer Overflow DOS Exploit
Comentarios:
0
3 035
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Anish Feroz
Exploits:
3
BusinessLevel:
0
XAMPP - Buffer Overflow Exploit
Comentarios:
0
5 394
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Talson
Exploits:
2
BusinessLevel:
0
5 192
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
LiquidWorm
Exploits:
718
BusinessLevel:
45
SCHLIX 2.2.8-1 Denial Of Service Exploit
Comentarios:
0
5 216
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Diyar Saadi
Exploits:
3
BusinessLevel:
0
Elasticsearch - StackOverflow DoS Exploit
Comentarios:
0
5 301
Security Risk Medium
D
Download
C
CVE-2023-31419
Verified by
gratis
You can open this exploit for free
Touhami Kasbaoui
Exploits:
6
BusinessLevel:
2
glibc qsort() Out-Of-Bounds Read / Write Exploit
Comentarios:
0
5 313
Security Risk Medium
D
Download
C
CVE-2023-6246
Verified by
gratis
You can open this exploit for free
Qualys Security Advisory
Exploits:
8
BusinessLevel:
4
glibc syslog() Heap-Based Buffer Overflow Exploit
Comentarios:
0
5 330
Security Risk Medium
D
Download
C
CVE-2023-6246
Verified by
gratis
You can open this exploit for free
Qualys Security Advisory
Exploits:
8
BusinessLevel:
4
Chrome 121 Javascript Fork Malloc Bomb Exploit
Comentarios:
0
5 490
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Georgi Guninski
Exploits:
16
BusinessLevel:
11
EzServer 6.4.017 Denial Of Service Exploit
Comentarios:
0
5 523
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Fernando Mengali
Exploits:
26
BusinessLevel:
3
[ shellcode ]
Shellcode category
In computer security, a shellcode is a small piece of code used as the payload in the exploitation of a software vulnerability. It is called "shellcode" because it typically starts a command shell from which the attacker can control the compromised machine, but any piece of code that performs a similar task can be called shellcode. Because the function of a payload is not limited to merely spawning a shell, some have suggested that the name shellcode is insufficient. Shellcode is commonly written in machine code.
Classification:
There are several methods of classifying exploits. The most common is by how the exploit contacts the vulnerable software. A remote exploit works over a network and exploits the security vulnerability without any prior access to the vulnerable system. A local exploit requires prior access to the vulnerable system and usually increases the privileges of the person running the exploit past those granted by the system administrator. Exploits against client applications also exist, usually consisting of modified servers that send an exploit if accessed with a client application. Exploits against client applications may also require some interaction with the user and thus may be used in combination with the social engineering method. Another classification is by the action against the vulnerable system; unauthorized data access, arbitrary code execution, and denial of service are examples. Many exploits are designed to provide superuser-level access to a computer system. However, it is also possible to use several exploits, first to gain low-level access, then to escalate privileges repeatedly until one reaches root. Normally a single exploit can only take advantage of a specific software vulnerability. Often, when an exploit is published, the vulnerability is fixed through a patch and the exploit becomes obsolete until newer versions of the software become available Shellcodes any types.
-::DATE
-::DESCRIPTION
-::TYPE
-::HITS
-::RISK
-::GOLD
-::AUTHOR
Linux/x64 - create a shell with execve() sending argument using XOR (/bin//sh) Shellcode (55 bytes)
Comentarios:
0
7 768
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
0x177git
Exploits:
1
BusinessLevel:
0
9 050
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Senzee
Exploits:
2
BusinessLevel:
0
Linux/x64 - memfd_create ELF loader Shellcode (170 bytes)
Comentarios:
0
8 603
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Ivan Nikolsky
Exploits:
3
BusinessLevel:
1
Windows/x64 - PIC Null-Free Calc.exe Shellcode (169 Bytes)
Comentarios:
0
9 137
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Senzee
Exploits:
2
BusinessLevel:
0
10 351
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Nayani
Exploits:
1
BusinessLevel:
1
10 172
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Jeenika Anadani
Exploits:
1
BusinessLevel:
1
Windows/x86 - Create Administrator User / Dynamic PEB & EDT method null-free Shellcode 373 bytes
Comentarios:
0
10 702
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Xavi Beltran
Exploits:
7
BusinessLevel:
3
Linux/x86 - Polymorphic linux x86 Shellcode (92 Bytes)
Comentarios:
0
10 009
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Eduardo Silva
Exploits:
2
BusinessLevel:
1
FlipRotation v1.0 decoder - Shellcode (146 bytes)
Comentarios:
0
9 835
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Eduardo Silva
Exploits:
2
BusinessLevel:
1
11 473
Security Risk Medium
D
Download
-
Verified by
gratis
You can open this exploit for free
Bobby Cooke
Exploits:
26
BusinessLevel:
3
Exploits En [ March ]: 105
Criticos: 42
Altos: 37
Medios: 21
Bajos: 5
Mejor autor del mes [ metasploit ]
Exploits: 39269
Investigadores: 47395