👾KEYWORD SERVICE 🏷#sql_injection
Name: psb-project-sql-injection
Github: https://github.com/FrightenedFox/psb-project-sql-injection

👾KEYWORD SERVICE 🏷#exploit
Name: AEV
Github: https://github.com/Hugo1307/AEV

👾KEYWORD SERVICE 🏷#exploit
Name: war-tycoon
Github: https://github.com/defrizletov/war-tycoon

👾KEYWORD SERVICE 🏷#exploit
Name: Exploits_Scripts
Github: https://github.com/Vitorpignataro/Exploits_Scripts

👾KEYWORD SERVICE 🏷#exploit
Name: iPhone
Github: https://github.com/SleepTheGod/iPhone

👾KEYWORD SERVICE 🏷#exploit
Name: Matrix
Github: https://github.com/SleepTheGod/Matrix

👾KEYWORD SERVICE 🏷#exploit
Name: sequix
Github: https://github.com/SSOOLLEELLHH/sequix

👾KEYWORD SERVICE 🏷#exploit
Name: SectorExploit
Github: https://github.com/Idkwhatudoin/SectorExploit

👾KEYWORD SERVICE 🏷#exploit
Name: PythonExploitFramework
Github: https://github.com/skraynick/PythonExploitFramework

👾KEYWORD SERVICE 🏷#exploit
Name: race-condition-exploit
Github: https://github.com/radurobot/race-condition-exploit

👾KEYWORD SERVICE 🏷#exploit
Name: WordBombExploits
Github: https://github.com/x203f/WordBombExploits

👾KEYWORD SERVICE 🏷#exploit
Name: robear-scripts
Github: https://github.com/ItsBearsie/robear-scripts

👾KEYWORD SERVICE 🏷#exploit
Name: vsftpd_2.3.4_Exploit
Github: https://github.com/sanskar30/vsftpd_2.3.4_Exploit

👾KEYWORD SERVICE 🏷#exploit
Name: Exploit-MSI-Lab
Github: https://github.com/KrishSai1997/Exploit-MSI-Lab

👾KEYWORD SERVICE 🏷#sql_injection
Name: SQL-Injection-and-XSS-Cross-Site-Scripting---Capture-the-Flag
Github: https://github.com/jdryan1217/SQL-Injection-and-XSS-Cross-Site-Scripting---Capture-the-Flag

👾KEYWORD SERVICE 🏷#exploit
Name: quetzas-exploits
Github: https://github.com/quetzalcoatl201/quetzas-exploits

👾KEYWORD SERVICE 🏷#exploit
Name: Silent-PDF-Builder
Github: https://github.com/MrAnonymousX22/Silent-PDF-Builder

👾KEYWORD SERVICE 🏷#exploit
Name: exploit-bin-tests
Github: https://github.com/ebzrn/exploit-bin-tests

👾KEYWORD SERVICE 🏷#exploit
Name: WirelessExploitation
Github: https://github.com/ThomasMahr/WirelessExploitation

👾KEYWORD SERVICE 🏷#sql_injection
Name: CRUD_PHP_APP
Github: https://github.com/Maikelek/CRUD_PHP_APP

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-24112
Github: https://github.com/Acczdy/CVE-2022-24112_POC
Describe:
An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was changed or the port of Admin API was changed to a port different from the data panel, the impact is lower. But there is still a risk to bypass the IP restriction of Apache APISIX's data panel. There is a check in the batch-requests plugin which overrides the client IP with its real remote IP. But due to a bug in the code, this check can be bypassed.