<![CDATA[Spear - Exploit & POCs]]> https://spear.cx/ Sat, 11 Jul 2026 20:19:28 +0000 MyBB <![CDATA[Oracle E-Business Suite RCE Exploit]]> https://spear.cx/Thread-Source-Code-Oracle-E-Business-Suite-RCE-Exploit Fri, 19 Jun 2026 01:04:46 +0200 aqua]]> https://spear.cx/Thread-Source-Code-Oracle-E-Business-Suite-RCE-Exploit CVE: 2025-61882

Exploit Type: Unauthenticated Remote Code Execution

Severity: 9.8 Critical

CL0p^_- ransomware was actively exploiting a zero-day in Oracle E-Business Suite (CVE-2025-61882), allowing unauthenticated remote code execution via the BI Publisher component. The attacks have led to data theft, lateral movement, and extortion.

Versions Affected:
Hidden Content
You must register or login to view this content.


Exploit Download Link:
Hidden Content
You must register or login to view this content.
]]> CVE: 2025-61882

Exploit Type: Unauthenticated Remote Code Execution

Severity: 9.8 Critical

CL0p^_- ransomware was actively exploiting a zero-day in Oracle E-Business Suite (CVE-2025-61882), allowing unauthenticated remote code execution via the BI Publisher component. The attacks have led to data theft, lateral movement, and extortion.

Versions Affected:
Hidden Content
You must register or login to view this content.


Exploit Download Link:
Hidden Content
You must register or login to view this content.
]]> <![CDATA[Cisco Unified Communications RCE Exploit 2026]]> https://spear.cx/Thread-Source-Code-Cisco-Unified-Communications-RCE-Exploit-2026 Fri, 19 Jun 2026 00:51:50 +0200 aqua]]> https://spear.cx/Thread-Source-Code-Cisco-Unified-Communications-RCE-Exploit-2026 CVE: CVE-2026-20045

Score: 8.2 High

Exploit Type: Unauthenticated Remote Code Execution

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.

Versions Affected:
Hidden Content
You must register or login to view this content.


Exploit Download:
Hidden Content
You must register or login to view this content.


Read The Read.md File For Help]]> CVE: CVE-2026-20045

Score: 8.2 High

Exploit Type: Unauthenticated Remote Code Execution

A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.

Versions Affected:
Hidden Content
You must register or login to view this content.


Exploit Download:
Hidden Content
You must register or login to view this content.


Read The Read.md File For Help]]> <![CDATA[Dedi Exploiter V2 Scanning servers for vulnerabilities]]> https://spear.cx/Thread-Free-Dedi-Exploiter-V2-Scanning-servers-for-vulnerabilities Sun, 31 May 2026 13:20:43 +0200 zerodark]]> https://spear.cx/Thread-Free-Dedi-Exploiter-V2-Scanning-servers-for-vulnerabilities [Image: dedi-exploiter.webp]
[center]Dedi Exploiter V2[center]
[center][B]Contact on Telegram to Buy More Tools[B][center]
Dedi Exploiter V2 is commonly described as a tool associated with testing vulnerabilities in dedicated servers. It is often linked with identifying weak configurations, outdated software, or exploitable entry points.
🔍 Scanning servers for vulnerabilities
⚡ Identifying outdated services or open ports
🛠️ Attempting exploitation techniques (in controlled environments)
📊 Reporting weak points in server infrastructure
[center][B]Get More Tools[B][center]
[center][SIZE=7]Download Link 1[center]
[center][SIZE=7]Download Link 2[center]
[center] Virus Total Report [center]
]]> [Image: dedi-exploiter.webp]
[center]Dedi Exploiter V2[center]
[center][B]Contact on Telegram to Buy More Tools[B][center]
Dedi Exploiter V2 is commonly described as a tool associated with testing vulnerabilities in dedicated servers. It is often linked with identifying weak configurations, outdated software, or exploitable entry points.
🔍 Scanning servers for vulnerabilities
⚡ Identifying outdated services or open ports
🛠️ Attempting exploitation techniques (in controlled environments)
📊 Reporting weak points in server infrastructure
[center][B]Get More Tools[B][center]
[center][SIZE=7]Download Link 1[center]
[center][SIZE=7]Download Link 2[center]
[center] Virus Total Report [center]
]]> <![CDATA[Gr3eNoX Exploit Scanner V4.2 responsible in case of any damage]]> https://spear.cx/Thread-Free-Gr3eNoX-Exploit-Scanner-V4-2-responsible-in-case-of%C2%A0any-damage Sun, 31 May 2026 13:19:23 +0200 zerodark]]> https://spear.cx/Thread-Free-Gr3eNoX-Exploit-Scanner-V4-2-responsible-in-case-of%C2%A0any-damage [Image: Gre3nOX-Exploit.webp]
[center]Gr3eNoX Exploit Scanner V4.2[center]
[center][B]Contact on Telegram to Buy More Tools[B][center]
Detecting outdated software
Identifying known vulnerabilities
Highlighting potential entry points
[center][B]Get More Tools[B][center]
[center][SIZE=7]Download Link 1[center]
[center][SIZE=7]Download Link 2[center]
[center] Virus Total Report [center]
]]> [Image: Gre3nOX-Exploit.webp]
[center]Gr3eNoX Exploit Scanner V4.2[center]
[center][B]Contact on Telegram to Buy More Tools[B][center]
Detecting outdated software
Identifying known vulnerabilities
Highlighting potential entry points
[center][B]Get More Tools[B][center]
[center][SIZE=7]Download Link 1[center]
[center][SIZE=7]Download Link 2[center]
[center] Virus Total Report [center]
]]> <![CDATA[Metasploit Framework v3.4.0]]> https://spear.cx/Thread-Source-Code-Metasploit-Framework-v3-4-0 Sun, 31 May 2026 13:18:18 +0200 zerodark]]> https://spear.cx/Thread-Source-Code-Metasploit-Framework-v3-4-0 Metasploit Framework v3.4.0
Metasploit Framework v3.4.0
Metasploit Framework v3.4.0 Overview
Table of Contents
Metasploit is a well-known penetration testing framework used in ethical hacking and security validation.
Metasploit Framework Security Risks
Misuse in unauthorized testing
Exploit simulation risks
Metasploit Framework Defensive Insight
Used to test vulnerabilities
Improves security patching
Strengthens defense systems


Download Link
Download Link
[/center]
Download Link
[/center]
]]> Metasploit Framework v3.4.0
Metasploit Framework v3.4.0
Metasploit Framework v3.4.0 Overview
Table of Contents
Metasploit is a well-known penetration testing framework used in ethical hacking and security validation.
Metasploit Framework Security Risks
Misuse in unauthorized testing
Exploit simulation risks
Metasploit Framework Defensive Insight
Used to test vulnerabilities
Improves security patching
Strengthens defense systems


Download Link
Download Link
[/center]
Download Link
[/center]
]]> <![CDATA[AI Prompt Injection Tutorial OpenClaw Agents & More]]> https://spear.cx/Thread-Free-AI-Prompt-Injection-Tutorial-OpenClaw-Agents-More Sun, 31 May 2026 09:53:44 +0200 asva]]> https://spear.cx/Thread-Free-AI-Prompt-Injection-Tutorial-OpenClaw-Agents-More
Examples of data I have had AI Agents reveal: Backend API Keys, Admin portal URL, Admin email & name, team members with access names & emails, technology stack & more. 

If they don't have the proper prompts in place you can trick it to reveal information with simple prompts such as:


Hidden Content
You must register or login to view this content.


So far I have tested this on OpenClaw based agents that are running on Mac Minis on the backend in a production enviroment and Hermes. 

Try it out and see what you get.]]>
Examples of data I have had AI Agents reveal: Backend API Keys, Admin portal URL, Admin email & name, team members with access names & emails, technology stack & more. 

If they don't have the proper prompts in place you can trick it to reveal information with simple prompts such as:


Hidden Content
You must register or login to view this content.


So far I have tested this on OpenClaw based agents that are running on Mac Minis on the backend in a production enviroment and Hermes. 

Try it out and see what you get.]]> <![CDATA[CVE-2024-6387 (regreSSHion) Exploit]]> https://spear.cx/Thread-Source-Code-CVE-2024-6387-regreSSHion-Exploit Sun, 31 May 2026 09:36:03 +0200 asva]]> https://spear.cx/Thread-Source-Code-CVE-2024-6387-regreSSHion-Exploit
It exploits a race condition in the signal handler of OpenSSH, potentially leading to remote code execution as root. 

Usage:

  1. Compile the exploit
    gcc -o regreSSHion exploit.c -lpthread
  2. Run the exploit
    ./regreSSHion <target_ip> <target_port>
    Replace <target_ip> & <target_port> with the IP address and port of the vulnerable OpenSSH server.
  3. Interpret Output
    Monitor the terminal for exploitation attempts and feedback. Adjust timing parameters or shellcode as necessary for successful exploitation.

Shellcode Customization:
You can customize the shellcode in the exploit.c file to execute different payloads or commands on the target system. The provided shellcode is a basic example that spawns a /bin/sh shell. Modify the shellcode[] array to suit your specific requirements.

Download Link: 
Hidden Content
You must register or login to view this content.


[Image: PoC.png?raw=true]]]>
It exploits a race condition in the signal handler of OpenSSH, potentially leading to remote code execution as root. 

Usage:

  1. Compile the exploit
    gcc -o regreSSHion exploit.c -lpthread
  2. Run the exploit
    ./regreSSHion <target_ip> <target_port>
    Replace <target_ip> & <target_port> with the IP address and port of the vulnerable OpenSSH server.
  3. Interpret Output
    Monitor the terminal for exploitation attempts and feedback. Adjust timing parameters or shellcode as necessary for successful exploitation.

Shellcode Customization:
You can customize the shellcode in the exploit.c file to execute different payloads or commands on the target system. The provided shellcode is a basic example that spawns a /bin/sh shell. Modify the shellcode[] array to suit your specific requirements.

Download Link: 
Hidden Content
You must register or login to view this content.


[Image: PoC.png?raw=true]]]>