66356 matches found
gdog
Gdog Un backdoor sigiloso para Windows basado en Python que utiliza Gmail como servidor de comando y control Este proyecto fue inspirado por gcat https://github.com/byt3bl33d3r/gcat de byt3bl33d3r. Requisitos Python 2.x Módulo PyCrypto Módulo WMI Módulo Enum34 Módulo Netifaces Características...
gdog
Gdog A stealthy Python based Windows backdoor that uses Gmail as a command and control server This project was inspired by the gcathttps://github.com/byt3bl33d3r/gcat from byt3bl33d3r. Requirements Python 2.x PyCrypto module WMI module Enum34 module Netifaces module Features Encrypted...
voltron
Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...
voltron
Voltron Voltron es un kit de herramientas extensible para la interfaz de usuario de depuradores, escrito en Python. Su objetivo es mejorar la experiencia del usuario de varios depuradores LLDB, GDB, VDB y WinDbg permitiendo la conexión de vistas de utilidad que pueden recuperar y mostrar datos de...
intentshield
IntentShield No filtres lo que tu IA dice. Filtra lo que está a punto de hacer Verificación de intención previa a la ejecución para agentes de IA. Por Qué Existe Esto Los agentes de IA tienen acceso a herramientas. Pueden ejecutar comandos de shell, escribir archivos, navegar por URLs, enviar...
Bropper
BROPPER Una herramienta python automática de explotación Blind ROP Resumen BROP Blind ROP fue una técnica descubierta por Andrew Bittau de Stanford en 2014. Original paper Slides La mayoría de servidores como nginx, Apache, MySQL, realizan un fork y luego se comunican con el cliente. Esto signifi...
CVE-2020-8813
CVE-2020-8813 Cacti v1.2.8 Unauthenticated Remote Code Execution Uses Python 3 Running without Docker: git clone https://github.com/hexcowboy/CVE-2020-8813.git && cd CVE-2020-8813 python3 -m venv env && source env/bin/activate pip install -r requirements.txt python exploit.py Running with Docker:...
CNVD-2020-10487-Bulk-verification
CNVD-2020-10487 CVE-2020-1938 Batch Verification Script Batch script, based on the POC file by @YDHCUI, supports batching and automatic screenshots for easy review. 1. Environment Preparation Use conda to install virtual environments search Baidu for miniconda installation. Since the POC uses...
CVE-2022-25476
CVE-2022-25476 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python...
Aj-Report-sql-CVE-2024-5356-POC
exp.py -u specifies URL or -f specifies file for batch detection, -t specifies threads, -h for help Usage pi install requirements.txt python exp.py -u 目标url -t 10 python exp.py -h Notes Ensure the URL starts with http:// or https://, otherwise an error will occur and cannot execute...
struts-pwn
struts-pwn An exploit for Apache Struts CVE-2017-5638 Usage Testing a single URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Testing a list of URLs. python struts-pwn.py --list 'urls.txt' -c 'id' Checking if the vulnerability exists against a single URL...
credential-attacks-toolkit
CredAttack — Credential Attacks Toolkit ⚠️ LEGAL NOTICE — Authorised security testing ONLY. Using this tool against systems you do not own or have explicit written permission to test is illegal under the Computer Fraud and Abuse Act US, Computer Misuse Act UK, and equivalent laws worldwide. See...
credcheck
Características Verificar credenciales de un objetivo dado. Verificar credenciales de forma pasiva usando regex. Script de línea de comandos. Usar como biblioteca Tareas pendientes Publicar en pypi Inclusión de documentación de API Regex precisos para credenciales Casos de prueba Múltiples...
WSPIH
WSPIH Escáner de archivos de información personal sensible de sitios web Declaración: Este proyecto es solo para fines educativos, pruebas e intercambio. No lo utilice para fines ilegales. Si el objetivo es un sitio web escolar, por favor envíe la vulnerabilidad a la Plataforma de Reporte de...
SimplesApachePathTraversal
SimplesApachePathTraversal Simples Apache Path Traversal It's a simple tool for test vulnerability Apache Path Traversal https://blog.mrcl0wn.com/2021/10/uma-simples-tool-para-apache-path.html Autor: MrCl0wn Blog: https://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter:...
log4shell-scanner
log4shell-scanner A dependency-free, defensive scanner for Log4Shell — finds vulnerable log4j-core jars and JNDI exploit patterns in logs and config. Why this project During my CERT-In rotation I worked on threat identification, containment, remediation and threat hunting — exactly the workflow...
shellshocker-python
shellshocker-python This is a Python Application that helps you detect if your machine that run Bash is vulnerable by CVE-2014-6271...
cvedb
CVEdb CVEdb is yet another Python CVE database library and utility. There are lots already available. Why create another? Most existing libraries rely on a third party API like cve.circl.lu, which can and do throttle usage, require registration, and/or demand an internet connection. Some librarie...
CVE-2018-8097
CVE-2018-8097 PoC This is a simple python Proof of Concept script demonstrating the CVE-2018-8097, affecting the PyEve library for versions 0.7.5 Usage usage: cve20188097.py -h -u URL -c COMMAND options: -h, --help show this help message and exit -u URL, --url URL Target URL where you can use the...