It contains numerous exploits for the SecGen Project.
- Nanocms RCE - ✓
- Apache Spark (cve_2022_33891) - ✓
- Apache Druid RCE (cve-2021-25646) - ✓
- GLPI htmLawed php command injection (CVE-2022-35914) - ✓
- Jenkins CLI Deserialization - v2.56 and below (CVE-2017-1000353) - ✓
- LinuxKI Toolset 6.01 Remote Command Execution (CVE-2020-7209) - ✓
- Easy Chat Server 3.1 - Remote Stack Buffer Overflow (SEH) (CVE-2004-2466) - ✓
- Lucee (CVE 2021-21307) - ✓
- Nagios XI (CVE CVE-2021-37343)
- Windows EternalBlue (2017-0143) - ✓
- OpenTSDB (CVE-2020-35476) - ✓
- TikiWiki Calendar Command Execution (Authenticated) - ✓
- TikiWiki Calendar Command Execution (Unauthenticated) - ✓
Contains various setup/modules for when puppet is applied.