instarecon

InstaRecon Automated basic digital reconnaissance. Great for getting an initial footprint of your targets and discovering additional subdomains. InstaRecon will do: DNS lookups A, PTR, MX, NS DNS lookups recursively on all hosts discovered Whois on domain and IP lookups Google dorks looking for...

AutoDirbuster

/ | / / / / / / / / /| |/ / / / / / / / / / / / / / / / / / / / / // / // // / // / / / / // / // // / / // |,////// /./,///// Automatically run and save ffuf scans for multiple IPs Contents Quick Run FAQ Why? What is the recommended usage? What data does this need? How does this script...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin Method Data Adding Headers Using Proxy Concurrency Silent Verbose Version Library Help & Bugs License Version...

reverse-shell

reverse-shell Reverse Shell as a Service - https://reverse-shell.sh Easy to remember reverse shell that should work on most Unix-like systems. Detects available software on the target and runs an appropriate payload. Usage 1. Listen for connection On your machine, open up a port and listen on it...

CVE-2022-22965

CVE-2022-22965 Exploit Of Spring4Shell! Usages python3 exploit.py Target Host...

CVE-2021-43778

CVE-2021-43778 CVE-2021-43778 poc usage: CVE-2021-43778 http://test.com...

CVE-2024-23692-EXP

CVE-2024-23692-EXP bash CVE-2024-23692.sh Nuclei nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt...

CVE-2026-99207

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding delayedcmdlock targetdodelayedwork takes dev-delayedcmdlock with a plain spinlock. It runs from systempercpuwq, so interrupts stay enabled while the lock is held. Every other...

CVE-2020-14882_POC

CVE-2020-14882 Batch Verification Usage python3 CVE-2020-14882.py Put the targets in target.txt, one per line Example...

CVE-2022-25257

CVE-2022-25257 SAS Logon 9.4 allows warning-message injection. Discovered: February 15, 2022 Affected Versions: 9.4 POC Exploit: SASLogon/csrf has one parameter called "target" This parameter affects the warning message for the URL the user was about to open but, because of the unknown origin, th...

Analysis-of-TomcatKiller---CVE-2025-31650-Exploit-Tool

Tomcat Vulnerability Scanner A tool to detect CVE-2025-31650 in Apache Tomcat servers using Shodan integration. Features HTTP/2 priority vulnerability detection Shodan target discovery CSV/JSON reporting Installation python -m venv venv source venv/bin/activate pip install -r requirements.txt...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

CVE-2026-41651

CVE-2026-41651 TLDR: Upload to target then python3 exploit.py...

CVE-2026-99207

The Linux kernel contains a vulnerability where target_do_delayed_work() acquires the dev->delayed_cmd_lock using a plain spin_lock() while running in system_percpu_wq. Because interrupts remain enabled while this lock is held, it conflicts with other functions—such as target_handle_task_attr(...

CVE-2026-99207 scsi: target: Disable interrupts while holding delayed_cmd_lock

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding delayedcmdlock targetdodelayedwork takes dev-delayedcmdlock with a plain spinlock. It runs from systempercpuwq, so interrupts stay enabled while the lock is held. Every other...

EUVD-2026-111959

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Disable interrupts while holding delayedcmdlock targetdodelayedwork takes dev-delayedcmdlock with a plain spinlock. It runs from systempercpuwq, so interrupts stay enabled while the lock is held. Every other...

CVE-2026-99206

A double-free vulnerability exists in the Linux kernel within the scsi: target: iscsi component. The issue is caused by a race condition where separate configfs opens can concurrently update the discovery AuthMethod parameter. This concurrency allows both callers to free the same value within the...

CVE-2026-99206 scsi: target: iscsi: Fix race in discovery auth updates

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix race in discovery auth updates Separate configfs opens can concurrently update the discovery AuthMethod parameter. Both callers may free the same value in iscsiupdateparamvalue, causing a double-free...

CVE-2025-55182_full_exploit

CVE-2025-55182fullexploit this repo have CVE-2025-55182 full exploit with RCE Step to run the exploit 1. Install Dependencies pip install -r requirements.txt 2. Run exploit python3 exploit.py targetlist.txt "command"...

LocalNet_Attacker

LocalNetAttacker This is a java based local network attacking tool. By using this tool you can attack or gather information about the target Windows Systems thats are connected with you in the same Network. Features Fetch IP details Fetch system details Web attacks Directory discovery Download an...