adaudit

adaudit Este script de PowerShell está diseñado para realizar una auditoría exhaustiva de Microsoft Active Directory, centrándose en la identificación de vulnerabilidades y debilidades de seguridad comunes. Su ejecución facilita la localización de áreas críticas que requieren refuerzo,...

social-engineer-toolkit

The Social-Engineer Toolkit SET The Social-Engineer Toolkit is an open-source penetration testing framework for authorized social-engineering assessments. SET provides guided attack vectors for security teams that need to test user awareness, validate controls, and run consent-based red-team...

Detect-CVE-2024-0762

CVE-2024-0762 Detection and Malware Analysis Script Overview This script is designed to detect UEFI firmware versions and assess them for vulnerabilities related to CVE-2024-0762. Additionally, it integrates with the VirusTotal API to analyze files for malware, providing comprehensive security...

CVE-2019-1218

CVE-2019-1218 Outlook iOS Spoofing Vulnerability I discovered XSS in IOS Outlook Mobile Application. A severe vulnerability in Microsoft Outlook for IOS that could allow an attacker to takeover a victim’s device. The security issue could enable a malicious actor to execute a cross-site scripting...

CVE-2023-36163

Exploit Title: BuildaGate5library - Reflected Cross-Site Scripting XSS Date: 06/07/2023 Exploit Author: Idan Malihi Vendor Homepage: None Version: 5 Tested on: Microsoft Windows 10 Pro CVE: CVE-2023-36163 PoC: An attacker needs to find the vulnerable parameter mc= and inject the JS code like: 'di...

riskootext4shell

riskootext4shell text4shell script for Apache Commons Text =1.10 CVE-2022-33980 The Apache Commons Text library is an alternative to the native functionalities of the Java JDK. Versions prior to version 1.10.0 of Apache Commons Similar to CVE-2022-33980 python3 text4shell.py -u...

Cisco-CVE-2020-3452-shodan-scanner

Cisco-CVE-2020-3452-checker simple bash script of Cisco CVE-2020-3452 checker Requirement: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation Disclaimer: The script is for security analysis and research only, hence I would not be liable if it i...

deepce

deepce . == === /"""""""""""""""""/ === / ===- \ X / \ \ / \/ / / / / / / / / \ ENUMERATE / // / / / // / / / ESCALATE ,/// ./// ESCAPE // Website Docker Enumeration, Escalation of Privileges and Container Escapes DEEPCE In order for it to be compatible with the maximum number of...

CVE-2024-29824

I have made some optimizations to the scripts in horizon3ai actually, it is just adding a verification mechanism to ensure accuracy Original project address: https://github.com/horizon3ai/CVE-2024-29824 add "-f / --file" and ThreadPool...

ProtOSINT

ProtOSINT ProtOSINT is a Python script that helps you investigate Proton Mail accounts. Version This is ProtOSINT v2. The first version has been around for a few years, but Proton's API changed and the old checks stopped working, so this is a rewrite that brings the tool back to life. Big thanks ...

PENeL

PENeL - Powershell with Embedded .NET Library Program that prepares a .NET DLL Library to run embedded in Powershell Script Created By: Guilherme Bacellar Moralez Th3 0bservator https://twitter.com/th30bservator Disclaimer This code is created and maintened only for a research proposal. Please do...

CVE-2024-0012-POC

This is actual POC, inspired by https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/ Usage like - python3 cve-2024-0012-pan-os-poc.py --url "https://target-system" --no-verify --no-verify if SSL doesn't work or expired else do not use this tag...

SpoofThatMail

SpoofThatMail Bash script to check if a domain or list of domains can be spoofed based in DMARC records File with domains One per line: sh SpoofThatMail.sh -f domains.txt One single domain: sh SpoofThatMail.sh -d domain...

serialator

serialator Python script to exploit CVE-2015-4852. Description During a recent engagement, I found that Nessus was now actively exploiting vulnerabilities for confirmation. When I checked the associated nasl script I found that the payload was generic enough to be used on a standalone script...

4-ZERO-3

Introduction 4-ZERO-3 Tool to bypass 403/401. This script contain all the possible techniques to do the same. NOTE : If you see multiple 200 Ok/bypasses as output, you must check the Content-Length. If the content-length is same for multiple 200 Ok/bypasses means false positive. Reason can be...

CVE-2021-25646

CVE-2021-25646 Apache Druid Remote Code Execution Vulnerability Wker Script Under development... ===================================================================================== First of all, thanks to Wker for the remote assistance. The purpose of writing the script is for practice. Usage T...

LinkedInDumper

LinkedInDumper Python 3 script to dump company employees from LinkedIn API 💬 Description LinkedInDumper is a Python 3 script that dumps employee data from the LinkedIn social networking platform. The results contain firstname, lastname, position title, location and a user's profile link. Only 2 A...

CVE-2020-3452

CVE-2020-3452 A WIP python script to exploit the directory traversal vulnerability in Cisco Adaptive Security Appliance ASAand Cisco Firepower Threat Defense FTD appliance web interfaces. Please note directories will be created for specified targets and any downloaded files will be downloaded to...

CVE-2019-16278-Nostromo_1.9.6-RCE

CVE-2019-16278 - Nostromo 1.9.6 RCE Python script to exploit RCE in Nostromo nhttpd = 1.9.6. Help usage: CVE-2019-16278.py -h -t TARGET -p PORT -c COMMAND -b BYTES Exploit for CVE-2019-16278 - Nostromo 1.9.6 RCE optional arguments: -h, --help show this help message and exit -t TARGET, --target...

EmBomber

EmBomber Python Script for Email Bombing which supports Gmail, Yahoo, Hotmail/Outlook Made with by Mazen Elzanaty Features Support Gmail Support Yahoo Support Hotmail/Outlook Usage EmBomber should work on all Linux distros running Python 2.7 First, clone it by entering the following command in th...