116765 matches found
ExchangeWeaknessTest
ExchangeWeaknessTest This script test the CVE-2021-26855 vulnerability on Exchange Server. Example python3 ExchangeWeaknessTest.py mydomain.com Licence Licensed under the GPL, version 3...
proxynotshell-IOC-Checker
proxynotshell-IOC-Checker Powershell script used to check for IOC's for CVE-2022-41040 and CVE-2022-41082 based on community research and Microsoft: GTESC The Sec Master Double Puslar Microsoft Security Resource Center Microsoft Security Blog The script may be updated to include more IOC's as mor...
Log4j-Scanner-Exploit
Log4Shell-Scanner-Exploit Bash script that allows identifying and/or exploiting the Log4Shell vulnerability remotely. This tool performs various tests using LDAP payloads and X-Api-Version, User-Agent, and X-Forwarded-For headers. Always use this script with prior authorization from the owner of...
beacon_health_check
Beacon Health Check Aggressor Script Joe Vest Twitter: @joevest Description This aggressor script uses a beacon's note field to indicate the health status of a beacon. This is done by ... Tracking each beacon's current sleep/jitter time Calculating health based on a "max expected check in time"...
Fortinet-PoC-Auth-Bypass
Fortinet-PoC-Auth-Bypass Bash Proof of Concept PoC for Fortinet Authentication Bypass - CVE-2022-40684 Usage: Usage: ./poc.sh Example: ./poc.sh 10.10.10.120 8443 Available in Exploit-db: https://www.exploit-db.com/exploits/51092...
riskootext4shell
riskootext4shell text4shell script for Apache Commons Text =1.10 CVE-2022-33980 The Apache Commons Text library is an alternative to the native functionalities of the Java JDK. Versions prior to version 1.10.0 of Apache Commons Similar to CVE-2022-33980 python3 text4shell.py -u...
lunar
LUNAR Lockdown UNix Auditing and Reporting Version Current version 16.6.1 Refer to lunar.sh and CHANGELOG.md for more up to date version information License CC BY-NC-SA: https://creativecommons.org/licenses/by-nc-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code i...
CVE-2018-7935
CVE-2018-7935 POC grab vaild Session first curl http://192.168.8.1/html/index.html | grep SessionID Instructions: Edit exploit.py , insert grabbed SessionID Vulnerability Status : Acknowledgemnt Recieved & Patch is released...
Get-log4j-Windows-local
Get-log4j-Windows-local.ps1 Identify all log4j components on a single local windows servers. CVE-2021-44228. A single use copy - see https://github.com/KeysAU/Get-log4j-Windows.ps1 for multi computer. Apache log4j CVE-2021-44228 Script Running: Export: Columns A - I: Continued: Description: Local...
CVE-2018-8174-exp
CVE-2018-8174EXP usage: CVE-2018-8174.py -h -u URL -o OUTPUT -i IP -p PORT Exploit pour CVE-2018-8174 arguments optionnels: -h, --help afficher ce message d'aide et quitter -u URL, --url URL URL de l'exploit -o OUTPUT, --output OUTPUT Fichier RTF de sortie de l'exploit -i IP, --ip IP adresse IP...
iDictPy
iDictPy Соленый, на 100% подтвержденный статус хакера Python-скрипт для превращения Apple ID в яблочный крамбл nicememe Изначально я сделал это как лучшую альтернативу этому куску дерьма: https://github.com/Pr0x13/iDict/ но потом я забыл, что я немного пьян, и вот что получилось. Необходимые...
CVE-2020-3452
CVE-2020-3452 A WIP python script to exploit the directory traversal vulnerability in Cisco Adaptive Security Appliance ASAand Cisco Firepower Threat Defense FTD appliance web interfaces. Please note directories will be created for specified targets and any downloaded files will be downloaded to...
claude-poc
Il existe plusieurs façons d'abuser de Claude code, celle-ci est l'une d'elles que j'ai découverte lors de mes recherches et signalée 23 novembre 2025 non corrigée, pourrait être utile lors de tests d'intrusion / tests de réd team pour l'accès initial. Résumé : apiKeyHelper est un script shell...
CVE-2018-15982
Credits @Ridter https://github.com/Ridter/CVE-2018-15982EXP @prsecurity https://github.com/prsecurity/CVE-2018-15982 Description Aggressor Script to launch an Internet Explorer driveby attack using CVE-2018-15982 exploit for Flash player. Affected Product Versions Adobe Flash Player Host...
nginx_log_check
nginxlogcheck Nginx log security analysis script Features Top 20 address statistics SQL injection analysis Scanner alert analysis Vulnerability exploitation detection Sensitive path access File inclusion attack Webshell Find Top 20 URLs by response length Find rare script file access Find 302...
WinFiHack
WinFiHack \ \ / | | | | | | \ \ /\ / /| | ' | | | | || |/ |/ | |/ / \ V V / | | | | | | | | | | | | Tool: Provide interface default: Wi-Fi Tool-Interf...
log4j-scanner
log4j-scanner Check CVE-2021-44228 vulnerability This test is not 100% reliable, but it helps with a quick scan How tu use: wget https://raw.githubusercontent.com/codiobert/log4j-scanner/main/log4j-scanner.sh -q -O - |bash...
CVE-2023-36163
Exploit Title: BuildaGate5library - Reflected Cross-Site Scripting XSS Date: 06/07/2023 Exploit Author: Idan Malihi Vendor Homepage: None Version: 5 Tested on: Microsoft Windows 10 Pro CVE: CVE-2023-36163 PoC: An attacker needs to find the vulnerable parameter mc= and inject the JS code like: 'di...
CVE-2013-3900-Remediation-Script
CVE-2013-3900 Remediation Script Define registry paths for both 32-bit and 64-bit configurations $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Function to add or update the registry key function...
