concealed_position

Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

git-vuln-finder

git-vuln-finder Encontrando posibles vulnerabilidades de software a partir de mensajes de confirmación de git. El formato de salida es un JSON con la confirmación asociada que podría contener una corrección relacionada con una vulnerabilidad de software. La búsqueda se basa en un conjunto de...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

CVE-2025-68613_Scanner

n8n CVE-2025-68613 Internet Scanner A Tkinter-based GUI tool to discover publicly exposed n8n instances via Shodan and test them for exposure to CVE‑2025‑68613 across a wide version range. The scanner: Queries Shodan with multiple fingerprints title, HTML markers, favicons, cloud orgs to find...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Exploitation Tool, You can use this tool to check the vulnerability in your FortiGate SSL-VPN. This vulnerability affects the following versions: • FortiOS 6.0 - 6.0.0 to 6.0.4 • FortiOS 5.6 - 5.6.3 to 5.6.7 • FortiOS 5.4 - 5.4.6 to 5.4.12...

web-hacking-playground

Web Hacking Playground Description Web Hacking Playground est un environnement de hacking web contrôlé. Il contient des vulnérabilités trouvées dans des cas réels, à la fois dans des tests d'intrusion et dans des programmes de Bug Bounty. L'objectif est que les utilisateurs puissent s'entraîner...

003Recon

📌 Description This repository contains some of my scripts that i created to automate some recon processes. It performs the following things; 1. Get subdomains of a domain 2. Filter out only online domains 3. Scan the domains for CRLF 4. Check for a CORS misconfigurations 5. Test for open redirect...

dump

Dump This repository contains dead/unfinished projects, small scripts or stuff that doesn't deserve a repository of its own. Contents git-gat : post-exploitation script for finding private git repos Infinity dead : find phone number of any Facebook user. json2paths : converts JSON keys to paths f...

osv-scanner

Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database and CLI interface to OSV-Scalibr that connects a project’s list of dependencies with the vulnerabilities that affect them. OSV-Scanner...

exim.exp

Simple exploit for vuln in exim 4.87 - 4.91 inclusive...

graphql-threat-matrix

GraphQL Threat Matrix ¿Por qué graphql-threat-matrix? graphql-threat-matrix fue creado para cazadores de recompensas, investigadores de seguridad y hackers, con el fin de ayudar a descubrir vulnerabilidades en múltiples implementaciones de GraphQL. Las diferencias en cómo las implementaciones de...

seccubus

О Seccubus Seccubus автоматизирует регулярное сканирование уязвимостей с помощью различных инструментов и помогает специалистам по безопасности быстро анализировать его результаты как при первом, так и при повторных сканированиях. При повторных сканированиях отчётность по дельтам гарантирует, что...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

CVE-2021-21300

CVE-2021-21300...

CVE-2021-41773_CVE-2021-42013

CVE-2021-41773CVE-2021-42013 Многонитевой инструмент для массового обнаружения и эксплуатации уязвимостей CVE-2021-41773 и CVE-2021-42013 Краткое описание Этот инструмент предназначен только для тестирования безопасности, не используйте его в незаконных целях! Назначение инструмента Многонитевой...

CVE-2021-37580

CVE-2021-37580 Support for single and batch verification of CVE-2021-37580 vulnerability Single URL detection: File batch verification:...

CVE-2023-1698

wagoexploit.py - PoC Exploit for CVE-2023-1698 🚀 About wagoexploit.py is a proof-of-concept PoC exploit for CVE-2023-1698 , a critical vulnerability affecting WAGO PLCs. This exploit grants the attacker shell access to the device, potentially exposing sensitive operations. ⚠️ Disclaimer: This...