s3reverse

s3reverse Install go get $ go get -u github.com/hahwul/s3reverse snap snap install s3reverse brew $ brew tap hahwul/s3reverse $ brew install s3reverse Usage Input options Basic Usage 8""""8 eeee 8"""8 8"""" 88 8 8"""" 8"""8 8""""8 8"""" 8 8 8 8 8 88 8 8 8 8 8 8 8eeeee 8 8eee8e 8eeee 88 e8 8eeee...

CVE-2024-7399-POC

CVE-2024-7399 Exploit for CVE-2024-7399. More details can be found here: https://davidxbors.github.io/0xpages/posts/cve-2024-7399/. Usage: python3 CVE-2024-7399.py https://localhost:7002/ --check python3 CVE-2024-7399.py https://localhost:7002/ --execute python3 CVE-2024-7399.py...

airflowscan

airflowscan Checklist and tools for increasing security of Apache Airflow. DISCLAIMER This project NOT AFFILIATED with the Apache Foundation and the Airflow project, and is not endorsed by them. Contents The purpose of this project is provide tools to increase security of Apache Airflow...

CVE-2026-30944-PoC

🔓 CVE-2026-30944 StudioCMS Privilege Escalation via Insecure API Token Generation NVD • Advisory • CWE-639 Overview The POST /studiocmsapi/dashboard/api-tokens endpoint in StudioCMS ≤ 0.3.0 allows any authenticated user at minimum Editor role to generate API tokens for any other user , including...

CVE-2026-24134-PoC

CVE-2026-24134-PoC Overview This repository contains the Proof of Concept PoC for CVE-2026-24134 , a Broken Object Level Authorization BOLA vulnerability in StudioCMS. Contents cve202624134poc.py - Python exploitation script Prerequisites StudioCMS=0.1.1 pip install requests colorama Quick Start...

Log4Shell

Log4Shell This repository is for Log4j 2021 CVE-2021-44228 Vulnerability demonstration and mitigation. What is Log4Shell? The CVE-2021-44228 / Log4Shell vulnerability consists of injecting vulnerable software with a malicious payload, which will ask Log4J to obtain a value from a third-party...

CVE-2026-33534

CVE-2026-33534 - EspoCRM 9.3.3 Authenticated SSRF Authenticated SSRF proof-of-concept for EspoCRM 9.3.3 via alternative IPv4 loopback notation in the /api/v1/Attachment/fromImageUrl endpoint. Summary EspoCRM 9.3.3 blocks direct loopback URLs such as http://127.0.0.1/..., but the server-side fetch...

BluetoothDucky

BluetoothDucky CVE-2023-45866 - BluetoothDucky implementation Using DuckyScript Unauthenticated bluetooth remote code execution. In short, run keyboard commands without pairing with their device This is an implementation of the CVE discovered by marcnewlin...

Reserch-CVE-2021-41773

CVE-2021-41773 Usage + python ./exploit.py -OPTIONS Target/List of Targets + -h : help + -url : specifict the target to check + -list : Scan multiple targets Example -h: help -url: url -list: path to file...

CVE-2024-56289

CVE-2024-56289 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg Vulnerable version Since this plugin uses the REST API, the Permalink must be set to Post name. 2. Subsequently, accessing...

pwncat_pwnkit

pwncatpwnkit Introduction The purpose of this module is to attempt to exploit CVE-2021-4034 pwnkit on a target when using pwncat. There is no need to setup any directories, compile any source or even have gcc on the remote target; the pwnkit module takes care of this automatically using the pwnca...

CVE-2026-26012

CVE-2026-26012 — Vaultwarden Cipher Enumeration PoC Full Cipher Enumeration Ignoring Organization Collection Permissions A proof-of-concept exploit for CVE-2026-26012, a broken access control vulnerability in Vaultwarden = 1.35.2 that allows any organization member to retrieve and decrypt all...

CVE-2024-56278

CVE-2024-56278 1️⃣ Component type WordPress plugin 2️⃣ Component details Component name WP Ultimate Exporter Vulnerable version ⚠️ Since the 'WP Ultimate Exporter' plugin is an addon for the 'WP Ultimate CSV Importer' plugin, both plugins need to be installed. 1. Create a new post using the code...

CVE-2026-31431-mitigation

CVE-2026-31431-mitigation This repository holds the source code for our eBPF-based mitigation against CVE-2026-31431, also known as "copy.fail". More info available at https://copy.fail The motivation behind building this solution was to fulfill the need for a reboot-less mitigation for...

spraygen

Spraygen Password list generator for password spraying - prebaked with goodies Version 1.7 Generates permutations of Months, Seasons, Years, Sports Teams NFL, NBA, MLB, NHL, Sports Scores, "Password", and even Iterable Keyspaces of a specified size. All permutations are generated with common...

CVE-2023-38646

CVE-2023-38646 CVE-2023-38646 Metabase 0.46.6 exploit This tool exploits a vulnerability CVE-2023-38646 in a software platform. The exploit allows for remote code execution via a crafted request, leveraging a mishandled database connection string. Overview The tool: Fetches the setup token from t...

dlinject

dlinject.py Inject a shared library i.e. arbitrary code into a live linux process, without ptrace. Inspired by Cexigua and linux-inject, among other things. Usage .. . | /| | || || / | .. / | | | | |/ \ | |/ / \ \ \ | \ | |/|| /| |\ \ | /| // | / /| / / /|| / source:...

ServiceNow-CVE-2025-11449-CVE-2025-11450-Mitigation-Script

ServiceNow CVE-2025-11449 & CVE-2025-11450 Mitigation Script Overview This script automatically detects and remediates CVE-2025-11449 and CVE-2025-11450 security vulnerabilities in ServiceNow UI Macros. These vulnerabilities could allow arbitrary code execution in users' browsers through speciall...

discover

Discover Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend...

CVE-2026-29000

CVE-2026-29000 — pac4j-jwt JWE Authentication Bypass CTF lab for researching the JWE authentication vulnerability in the pac4j-jwt library CVSS 9.3 Critical · CWE-287 · Affected: pac4j-jwt ← access admin panel ↓ Read sensitive data: employee list, system config, flag Project structure...