monkey

Monkey documentation This folder contains the Monkey Documentation site. For more information see content/development/contribute-documentation.md...

dataviz

OpenDNS Data Visualization Framework Official documentation at www.opengraphiti.com...

OneRuleToRuleThemStill

OneRuleToRuleThemStill An revamped and optimised version of OneRuleToRuleThemAll. OneRuleToRuleThemStill now has a 5% 6.9% reduction in rules 52,000 down to 49,465 48,414 with 0% performance loss against the Lifeboat and LastFM data breaches. Updates: De-duplication of resulting candidate...

CVE-2024-55980

CVE-2024-55980 Wr Age Verification = 2.0.0 - Unauthenticated SQL Injection Description The Wr Age Verification plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2023-22518

CVE-2023-22518 Improper Authorization Vulnerability in Confluence Data Center and Server. Atlassian has alerted administrators about a critical vulnerability in Confluence. Exploiting this issue can lead to data loss, so developers urge you to install patches as soon as possible. It is noted that...

pwndb

pwndb.py pwndb.py is a python command-line tool for searching leaked credentials using the Onion service with the same name. Usage usage: pwndb.py -h --target TARGET --list LIST --output OUTPUT --proxy PROXY optional arguments: -h, --help show this help message and exit --target TARGET Target...

mvt

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

grr

GRR Rapid Response is an incident response framework focused on remote live forensics. GRR is a python client agent that is installed on target systems, and python server infrastructure that can manage and talk to clients. Documentation Please visit our documentation website if you want to know...

Big-Ass-Data-Broker-Opt-Out-List

Big Ass Data Broker Opt-Out List Symbols| Meanings ---|--- 💐| crucial ☠| high priority 🎫| requires driver’s license cross out your ID ! 📞| must pick up a gasp! phone 💰| site charges money for access or removal whaaaat? This list, also known as BADBOOL, was started in September 2017 and was most...

LocalExifGeoMap

Local Exif Geo Map 📍 A powerful, privacy-focused, browser-based tool to visualize and analyze GPS data from your photos. Simply drag and drop images to generate interactive maps, heatmaps, elevation profiles, and trip statistics. Why? I've always wanted a self-hosted tool to analyze my photos and...

PTP-RAT

PTP-RAT Exfiltrate data over screen interfaces More information about how the tool works can be found at https://www.pentestpartners.com/security-blog/exfiltration-by-encoding-data-in-pixel-colour-values/...

CVE-2021-33558.

CVE : CVE-2021-33558. Exploit code of CVE-2021-33558 Summary In Boa/0.94.13 there is various misconfiguration.it expose various senstive information. Proof of Concept https://target.com/backup.html https://target.com/preview.html https://target.com/js/log.js https://target.com/log.html...

juicy-php

juicy-php Juicy-php - finds PHP info files with juicy information...

dref

DNS Rebinding Exploitation Framework This project is no longer maintained. dref does the heavy-lifting for DNS rebinding. The following snippet from one of its built-in payloads shows the framework being used to scan a local subnet from a hooked browser; after identifying live web services it...

CVE-2025-32013

CVE-2025-32013 Security Advisory and PoC for CVE-2025-32013 How to Use 1. Start here: Read this README file for an overview of the repository structure and contents. 2. Internal Security Advisory: Open 01SecurityAdvisory.md to see the detailed write-up addressing the vulnerability, its impact, an...

CVE-2020-24148

CVE-2020-24148 Server-side request forgery SSRF in the Import XML and RSS Feeds import-xml-feed plugin 2.0.1 for WordPress via the data parameter in a moovereadxml action. Vulnerable code: /moove-actions.php: ... public function moovereadxml $args = array 'data' = escsql wpunslash $POST'data' ,...

cve-2024-3094-tools

CVE-2024-3094 XZ Backdoor Tools This repository contains tools for the XZ Backdoor vulnerability, also known as CVE-2024-3094. About CVE-2024-3094 CVE-2024-3094, also known as the XZ Backdoor, is a critical vulnerability discovered in the XZ data compression library. For more information about th...

machinae

Machinae Security Intelligence Collector Machinae is a tool for collecting intelligence from public sites/feeds about various security-related pieces of data: IP addresses, domain names, URLs, email addresses, file hashes and SSL fingerprints. It was inspired by Automater1, another excellent tool...

LFiFreak

LFI Freak Features Works with Windows, Linux and OS X Includes bind and reverse shell for both Windows and Linux Written in Python 2.7 What is this all about? A unique tool for exploiting local file inclusions using PHP Input, PHP Filter and Data URI methods. Dependencies BeautifulSoup Disclaimer...

service-now

service-now Service-Now Article Bruteforcer The idea here is that there is misconfiguration with articles and could expose sensitive information. Any Issues raise the it here - https://github.com/RandomRobbieBF/service-now/issues or submit a PR! How to Use python3 service-now.py -u...