webcopilot

WebCopilot An automation tool that enumerate subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities. Features • Installation • Usage • WebCopilot • Tools Used • Acknowledgement WebCopilot is an automation tool designed to enumerate...

CVE-2024-24386

VitalPBX - CVE-2024-24386 Vulnerability Title: Command Injection Author: Erick Duarte Version: 3.2.5-2 The vulnerability occurs when using the Task Manager module in conjunction with Cron Profile. To exploit this vulnerability, we need to place a script in a specific folder within the OS. The...

wp2shell-scan

wp2shell-scan Detect and clean upwp2shell CVE‑2026‑63030 compromise across one or many WordPress sites. wp2shell is the pre‑authentication remote‑code‑execution vulnerability fixed in WordPress 7.0.2 / 6.9.5 / 6.8.6 2026‑07‑17. A public PoC appeared within a day and mass‑exploitation followed...

ScannerBadEpoll

ScannerBadEpoll Vulnerability Checker: Bad Epoll CVE-2026-46242 Vulnerability Checker: Bad Epoll CVE-2026-46242 Developed by Soluciones & Proyectos Franklin Technological solutions with professional backing This is an automated Bash script designed to audit the current Linux kernel version and...

CVE-2021-41773

ApacheRCE ApacheRCE is a small little python script that will allow you to input the apache version 2.4.49-2.4.50 and then input a list of ip addresses from a text file and mass run the exploit on them, this can be useful if you are running mutiple websites and you want to see if they can all be...

collateral-damage

Collateral Damage Collateral Damage is a kernel exploit for Xbox SystemOS using CVE-2024-30088. It targets Xbox One and Xbox Series consoles running kernel versions 25398.4478, 25398.4908, and 25398.4909. The initial entrypoint is via the Game Script UWP application. The first stage payloads, PE...

cve-2022-22965

Spring4Shell - CVE-2022-22965 Build let's clone the repository, build and run the container $ git clone https://github.com/twseptian/cve-2022-22965.git $ cd cve-2022-22965 $ docker build . -t spring4shell-poc $ docker run -p 8080:8080 --name spring4shell-poc spring4shell-poc check the access usin...

CVE-2025-0108-PoC

Disclaimer: The vulnerabilities and reproduction steps described in this article are intended solely for network security research and educational purposes. No one shall use the information provided herein for illegal purposes or unauthorized system testing. The author is not responsible for any...

PAN-OS_CVE-2024-9474

python3 exp.py...

Inspector

Ayudante de escalada de privilegios unix RESUMEN Inspector es un script de Python para ayudar en la escalada de privilegios en entornos Linux. Tras su inicio, este script busca la versión del kernel y verifica si existe un exploit, carga el historial de archivos bash, zsh, mysql... y carga la lis...

007-TheBond

Light Weight OSNIT Script for All platfrom Disclaimer : - DeadShot0x7 will not responsible if you misuse the script . You can download the script on various platform Linux : 1. Clone the Repository by using git clone command 2. git clone 007-TheBond 3. cd 007-TheBond 4. pip install -r...

TrueCalle-Bot

TrueCalle-Bot TrueCaller Bot Python: Busca números de teléfono e imprime resultados en la terminal Hecho por hossamsalem23 Primero : Descargar Chrome webdriver root@kitploit: https://chromedriver.chromium.org/downloads Instalación root@kitploit: git clone...

scriptkiddi3

Streamline your recon and vulnerability detection process with SCRIPTKIDDI3, A recon and initial vulnerability detection tool built using shell script and open source tools. How it works • Installation • Install with Docker • Usage • MODES • Important Notes | Webhook configurations • For Develope...

scriptkiddi3

Optimice su proceso de reconocimiento y detección de vulnerabilidades con SCRIPTKIDDI3, una herramienta de reconocimiento y detección inicial de vulnerabilidades construida con script de shell y herramientas de código abierto. Cómo funciona • Instalación • Instalar con Docker • Uso • MODOS • Nota...

oregami

Oregami """ What is this register used for? Hmm.. I'll just rename it to veryuniquename, do a textual search, and find all references! Ok.. Waiting for the search to end.. any minute now.. Done! Now I just need to understand which of the search result is relevant to the current usage frame of the...

CVE-2019-0193

CVE-2019-0193 Solr DataImport Handler RCE RCE-Vuln jdbc D:\CVE\CVE-2019-0193\solr-7.7.2\server\solr-webapp\webapp\WEB-INF\lib\mysql-connector-java-5.1.48.jar dataSource name="fromMysql" type="JdbcDataSource" driver="com.mysql.jdbc.Driver" url="jdbc:mysql://localhost:3306/mysql"...

flare-floss

Scripts de FLOSS FLOSS soporta la conversión de su salida en scripts para varias herramientas. Consulte los scripts de renderizado en este directorio. Adicionalmente, hay otro plugin para IDA para permitir que FLOSS extraiga automáticamente cadenas ofuscadas y las aplique al módulo actualmente...

web-traffic-generator

web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...

swaggerHole

A python3 script searching for secret on swaggerhub Introduction • Requirements • Installation • Usage • Output explanation • Thanks Created by Liodeus Introduction This tool is made to automate the process of retrieving secrets in the public APIs on swaggerHub. This tool is multithreaded and pip...

URLCADIZ

URLCADIZ v1.0 Author: https://github.com/PerezMascato Twitter: https://twitter.com/perezmascato Email: [email protected] no... i'm not pwned! A simple script to generate a hidden url for social engineering. Legal disclaimer: Usage of URLCADIZ for attacking targets without prior mutual consen...