heartbleed-poc

HeartBleed 테스터 및 익스플로잇 NB 현재 대부분의 도구nmap, metasploit, nessus, 심지어 burp는 가장 최신 버전의 스캐너를 갖추고 있습니다. 이 도구들은 도구가 아직 개발 중이던 초기 단계에 출시되었습니다. 지금은 이것들보다는 그 도구들을 사용하는 것이 좋습니다. 도구 가이드 대량 스캔을 원한다면 NMAP 스크립트가 현재 최선의 선택입니다. 가장 많은 프로토콜STARTTLS을 지원하려면 수정된 Metasploit 스크립트를 확인하세요. 실제로 익스플로잇을 수행하려면 Python 스크립트를...

shellshock_scanner

shellshockscanner Python Scanner for "ShellShock" CVE-2014-6271...

msploitego

msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...

LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-

= doi.org/10.5281/zenodo.18278567 = orcid.org/0009-0007-7728-256X 💀 LlamaStack-RCE: CVE-2024-50050 Supply Chain Exploitation Framework UNRESTRICTED CLASSIFIED MATERIAL - FOR AUTHORIZED RED TEAMING ONLY 1. Executive Summary Deterministic Analysis LlamaStack-RCE is a high-fidelity simulation and...

CVE-2017-10271

CVE-2017-10271 Usage: python CVE-2017-10271.py url...

28458

CVE-2020-28458 Affected versions of this package are vulnerable to Prototype Pollution. datatables v1.10.16-1.10.16 Usage Run the Python script and enter the required inputs: Target URL Proxy URL optional, leave blank if none Timeout in seconds default 10 Example: python3 exploit.py The script us...

CVE-2024-9264

CVE-2024-9264 python CVE-2024-9264.py '' -u '' -p '' -c ''...

cve-2014-6287.py

Modified version of CVE-2014-6287 python script...

JWT-Bruteforcer

JWT-Bruteforcer Basic Jwt Bruteforcer tool with CVE-2018-1000531 Vulnerability Test Imported libraries: jwt base64 Requires minimum version of python 3.6...

G3-Loop-DoS

G3-Loop-DoS Python Script for Automated Vulnerability Detection of Loop DoS and CVE-2024-2169 Description: This Python script automates the process of scanning for systems potentially vulnerable to the Loop DoS attack and the hypothetical CVE-2024-2169 vulnerability. It focuses on scanning ports...

CVE-2018-7600-Drupal7

CVE-2018-7600-Drupal7 CVE-2018-7600【Drupal7】Batch scanning tool. 主文件：CVE-2018-7600-Drupal7.py Main file: CVE-2018-7600-Drupal7.py 其实本质是封装了whoami的exp In essence, it encapsulates the whoami exploit Drupal7/8的原理是一样的但该脚本当是只做了7的适配 Drupal7/8 principles are the same, but this script currently only adapt...

Detect-CVE-2017-0144-attack

Python Program to Detect CVE-2017-0144 Attack Python program tasked with continuously monitoring network traffic in real-time. It will alert on the console when it detects a CVE-2017-0144 EternalBlue attack 1. Lab Model This lab is performed on 3 virtual machines in VMWare. 1 attacker machine Kal...

CVE-2018-2893

CVE-2018-2893 Can directly bounce a reverse shell Usage Listen nc -lvvp reverseport Send payload python weblogic.py targethost targetport reversehost reverseport Reference bigsizeme pyn3rd Note For testing and learning purposes only, do not use for other purposes...

CVE-2020-5902-POC

CVE-2020-5902-POC Batch detection of CVE-2020-5902 python3 CVE-2020-5902.py infile.txt...

ivanti_shell

CVE-2024-21887 Exploitation with Ngrok Reverse Shell This repository provides a Python script designed to demonstrate the exploitation of the CVE-2024-21887 vulnerability in Ivanti Connect Secure gateways. It utilizes Ngrok to establish a reverse shell for educational and ethical testing purposes...

arsenal

Arsenal Arsenal is just a quick inventory, reminder and launcher for pentest commands. This project written by pentesters for pentesters simplify the use of all the hard-to-remember commands In arsenal you can search for a command, select one and it's prefilled directly in your terminal. This...

adidnsdump

Herramienta de volcado de DNS integrado de Active Directory Por defecto, cualquier usuario en Active Directory puede enumerar todos los registros DNS en las zonas DNS del Dominio o del Bosque, similar a una transferencia de zona. Esta herramienta permite la enumeración y exportación de todos los...

intelspy

Perform automated network reconnaissance scans to gather network intelligence. IntelSpy is a multi-threaded network intelligence tool which performs automated network services enumeration. It performs live hosts detection scans, port scans, services enumeration scans, web content scans,...

rdpy

RDPY Protocolo de Escritorio Remoto en twisted python. RDPY es una implementación pura en Python del protocolo Microsoft RDP Remote Desktop Protocol lado cliente y servidor. RDPY está construido sobre el motor de red orientado a eventos Twisted. RDPY soporta la capa de seguridad estándar de RDP,...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...