mariadb-13-rce-lab

(★ 62)

MariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and raptor-loop-hunt.

Owner Repos

raptor-loop-hunt ★ 209

RAPTOR autonomous looping multi-altitude security vulnerability hunt — Claude Code skill

Python
fastjson-jsontype-rce-lab ★ 204

Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.

Python
CVE-2022-22963 ★ 115

CVE-2022-22963 PoC

Python
hikvision ★ 66

Hikvision log4j PoC

Python
leaklens ★ 62

Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery

Go
CVE-2024-20931 ★ 61

CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839

File Explorer

ZIP Download
  • .gitignore
  • docker-compose.yml
  • exploit.py
  • exploit_pure_sql.py
  • README.md
  • setup.sql

# Use via CDN

jsDelivr

jsDelivr serves any public GitHub repository as a CDN with zero setup. Pick a version and a file to get a ready-to-paste link and snippet.

Link
Example

Command Glossary

Commands referenced in this DOCs, explained below.

🔍

docker compose up

View Details ▼

Start and run Docker services defined in a Compose file.

docker compose up

Start all services defined in the docker-compose file:

docker compose up {{[-d|--detach]}}

Start services in the background (detached mode):

docker compose up --build

Start services and rebuild images before starting:

🔍

docker exec

View Details ▼

This command is an alias of `docker container exec`.

tldr docker container exec

View documentation for the original command:

🔍

docker inspect

View Details ▼

Return low-level information on Docker objects.

docker inspect {{container|image|id}}

Display information about a container, image, or volume using a name or ID:

docker inspect {{[-f|--format]}} '\{\{range.NetworkSettings.Networks\}\}\{\{.IPAddress\}\}\{\{end\}\}' {{container}}

Display a container's IP address:

docker inspect {{[-f|--format]}} '\{\{.LogPath\}\}' {{container}}

Display the path to the container's log file:

🔍

mariadb

View Details ▼

The mariadb client tool.

mariadb

Connect to MariaDB as the current user:

mariadb {{db_name}}

Connect to a specific MariaDB database:

mariadb {{[-u|--user]}} {{user_name}} {{[-p|--password]}} {{your_password}} {{db_name}}

Connect to a specific MariaDB database using username and password:

🔍

mysql

View Details ▼

The MySQL tool.

mysql {{database_name}}

Connect to a database:

mysql {{[-u|--user]}} {{user}} {{[-p|--password]}} {{database_name}}

Connect to a database, user will be prompted for a password:

mysql {{[-h|--host]}} {{database_host}} {{database_name}}

Connect to a database on another host:

🔍

python3

View Details ▼

This command is an alias of `python`.

tldr python

View documentation for the original command:

// repository documentation