easy-exploits

easy-exploits El repositorio actual contiene exploits de diferentes CVE IDs que fueron identificados en el pasado por mí CVE-2021-37910, CVE-2021-40288, CVE-2021-41435, CVE-2021-41436, CVE-2021-41437, CVE-2021-41441, CVE-2021-41442, CVE-2021-41445, CVE-2021-41449, CVE-2021-41450, CVE-2021-41451,...

Yasso

Yasso Powerful intranet penetration auxiliary toolset - let Yasso be like the wind. Supports brute-forcing of RDP, SSH, Redis, PostgreSQL, MongoDB, MSSQL, MySQL, WinRM and other services, fast port scanning, powerful web fingerprint recognition, one-click exploitation of various built-in services...

Airachnid-Burp-Extension

Web Cache Deception Burp Extension A Burp extension to test applications for vulnerability to the Web Cache Deception attack. Once the extension has been loaded, it can be accessed in the Target - Sitemap tab and right click on the resource that should be tested. A context sensitive menu item...

CVE-2022-21907

CVE-2022-21907 Descripción 1. Este repositorio detecta un sistema vulnerable a CVE-2022-21907 CVSS:3.1 9.8 y protege contra esta vulnerabilidad si se desea. Ofrezco 2 códigos de PowerShell en 1 línea. 2. Propongo scripts puros en Python, PowerShell, Ruby y módulos de Metasploit y Nmap para atacar...

WSSAT

WSSAT - Web Service Security Assessment Tool WSSAT is an open source web service security scanning tool which provides a dynamic environment to add, update or delete vulnerabilities by just editing its configuration files. This tool accepts WSDL address list as input file and for each service, it...

Pentest-tools

Neo-reGeorg 简体中文 ｜ English Neo-reGeorg is a project designed to actively restructure reGeorg with the aim of: Improve tunnel connection security Improve usability and avoid feature detection Improve the confidentiality of transmission content Solve the existing problems of reGeorg and fix some...

hackguard

hackguard ESCÁNER RÁPIDO DE VULNERABILIDADES EN APLICACIONES WEB Requisitos: 1. Asegúrate de que python3 esté instalado en windows o en Linux 2. Para Windows: python -m pip install -r requirements.txt 3. Para Linux: python3 -m pip install -r requirements.txt Instalación: 1. Para usuarios de Linux...

RedbloodC2

Versión pública de Redblood C2 This is a simple command and control server to handle sessions and your victims instalación $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Uso Después de instalar node.js y todos los módulos de npm ejecuta: nod...

CVE-2021-41773-PoC

CVE-2021-41773 Prueba de Concepto Prueba de concepto rápida y sencilla para comprobar si los hosts son vulnerables a CVE-2021-41773 python3 full.py hosts.txt Donde hosts.txt contiene tus objetivos: domain.com blah.com 192.168.1.1 Indicará si el host es vulnerable o no vulnerable. Versión en Pytho...

CVE-2022-37042

CVE-2022-37042 Zimbra CVE-2022-37042 Nuclei weaponized template shell path: /public/formatter.jsp Nuclei itself: https://github.com/projectdiscovery/nuclei shell have hidden input with 0 opacity, so just hover mouse over it, type command, then press Enter key: example shell url:...

CVE-2022-24637

Vulnerable Application Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with ' and get IPAddress, e.g 172.22.0.2 Database...

octohook

octohook Git Web Hook Tunnel for C2 Install apt-get update && apt-get upgrade -y apt-get install python3-pip git -y pip install --upgrade pip pip install virtualenv virtualenv -p python venv . venv/bin/activate git clone https://github.com/dsnezhkov/octohook pip install prompttoolkit PyGithub...

r3con

R3CON Herramienta multifuncional de reconocimiento web y escáner de vulnerabilidades r3con es una herramienta multifuncional de reconocimiento web y escáner de vulnerabilidades, y un rastreador increíblemente rápido que puede encontrar múltiples vulnerabilidades y recopilar información. Comprobar...

CVE-2026-57517

Control Web Panel ≤ 0.9.8.1224 — Inyección SQL Ciega a Ejecución Remota de Código Puerto 2083 → userRes POST → INTO DUMPFILE → Puerto 2031 Webshell → cwpsvc 🔴 Resumen de la Vulnerabilidad CVE-2026-57517 es una inyección SQL ciega crítica previa a la autenticación en Control Web Panel CWP versione...

spring-web-without-remoting

spring-web-without-remoting Spring Web 5.x con el paquete org.springframework.remoting eliminado, para corregir CVE-2016-1000027. Para más información, consulta spring-projects/spring-framework 24434...

CVE-2019-3980

CVE-2019-3980 Este repositorio fue creado para utilizar el PoC de Nessus con un ejecutable personalizado en C para ejecutar comandos en un host remoto y obtener la salida del comando. El archivo Python se utiliza para iniciar un servidor web, ejecutar el exploit y luego obtener los resultados a...

TIWAP

Totally Insecure Web Application Project TIWAP TIWAP is a web security testing lab made using Flask for budding security enthusiasts to learn about various web vulnerabilities. Inspired by DVWA, the contributors have tried their best to regenerate various web vulnerabilities The application is...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo is an open source honeypot for nosql databases that automates the process of detecting attackers,logging attack incidents. The simulation engines are deployed using the twisted framework.Currently the framework holds support for redis. N...

goWAPT

GOWAPT - Go Web Application Penetration Test GOWAPT is the younger brother of wfuzz a swiss army knife of WAPT, it allow pentester to perform huge activity with no stress at all, just configure it and it's just a matter of clicks. How to install To install gowapt just type: make sudo make install...

CVE-2024-30850-chaos-rat-rce-poc

https://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc/assets/146861503/ac03c8c7-54b3-4280-9f29-719c44af5192 CHAOS RAT v5.01 panel web RCE CVE-2024-30850, CVE-2024-31839 https://github.com/tiagorlampert/CHAOS Este exploit funciona suplantando una devolución de llamada de agente para un XSS...