Valentin Lobstein

PLS HAAAALP SIR

7

Hello, I have the notification, big RCE on Shopify, but it doesn't give me the endpoint. Pls halp sir

Hello Metasploit Team, I've added a bypass for the Remote Code Execution (RCE) vulnerability in the GiveWP plugin. This update includes: - **Modified the exploit module** to incorporate the bypass,...

Hello Metasploit Team, This PR adds a new auxiliary module to exploit an unauthenticated SQL injection vulnerability (CVE-2024-1071) in the **Ultimate Member** plugin for WordPress versions **2.1.3 to 2.8.2**. The...

Hello Metasploit Team, This PR adds a new exploit module for the SQL injection vulnerability in the WordPress wp-automatic plugin, affecting versions prior to 3.92.1 (CVE-2024-27956). The vulnerability allows unauthenticated...

Add module for TI WooCommerce Wishlist SQL Injection (CVE-2024-43917)

1

Hello Metasploit Team, This PR introduces a new auxiliary module that exploits an unauthenticated SQL injection vulnerability in the TI WooCommerce Wishlist plugin for WordPress (versions

feat: add WPProbe: A fast WordPress plugin enumeration tool

1

# Description This PR fully integrates WPProbe into Exegol. WPProbe enables efficient detection of WordPress plugins via REST API endpoints, and I believe it significantly enhances Exegol's capabilities in WordPress...

feat: replace pwncat-cs with my maintained fork pwncat-vl

1

# Description This PR replaces `pwncat-cs` with a maintained fork called `pwncat-vl`. Many users have reported that the original tool is no longer maintained and has become outdated. While it...

Fix compatibility with Python 3.13 (crypt module removal & deprecated import logic)

2

This PR fixes `pwncat` compatibility with **Python 3.13** by addressing five key issues: --- ## Fixes included ### Module replacement - Removed use of deprecated `crypt` module (dropped in Python...

### Template / PR Information Add CVE-2025-2611 ### Template Validation I've validated this template locally? - [X] YES - [ ] NO ### Lab setup To test the template, spin...

```bash # 1) Start Asterisk as root, in foreground so it creates its CLI socket sudo asterisk -F # 2) Connect to the Asterisk console and drop into a root...