Nosql-Exploitation-Framework

Nosql-Exploitation-Framework A FrameWork For NoSQL Scanning and Exploitation Framework NoSQL Exploitation Framework 2.02b Released Author NoSQL Exploitation Framework Authored By Francis Alexander Wiki NoSQL Exploitation Framework Wiki on Installation & Usage -...

iKy

Description | Installation | Website | Modules | Issues | Supporting iKy Description iKy is an OSINT tool that collects information from an email address or other selectors and displays the results in a visual interface. pending update: reflects the previous frontend Video Demo Installation...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

karton

Karton Distributed malware processing framework based on Python, Redis and S3. The idea Karton is a robust framework for creating flexible and lightweight malware analysis backends. It can be used to connect malware analysis systems into a robust pipeline with very little effort. We've been in th...

c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

nosqlpot

NoSQL-Honeypot-Framework NoPo NoSQL-Honeypot-Framework NoPo es un honeypot de código abierto para bases de datos NoSQL que automatiza el proceso de detectar atacantes,registrar incidentes de ataque. Los motores de simulación se despliegan usando el framework twisted.Actualmente el framework tiene...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

metta

Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...

CVE-2026-25243-debugfree

CVE-2026-25243 — DEBUG-free Redis RCE private Reliable remote code execution from a single crafted RESTORE on jemalloc Redis — noDEBUG command, no /proc, no gdb, no ROP, ASLR on. Runs the attacker's command as the redis process root in default images. 🔒 Private repository — authorized security...

CVE-2025-49844

CVE-2025-49844 - RediShell Use-after-free en el scripting Lua de Redis que conduce a la ejecución remota de código. Resumen del CVE Redis es una base de datos de código abierto en memoria. CVE-2025-49844 es una vulnerabilidad de use-after-free en el motor de scripting Lua integrado de Redis. Un...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

CVE-2024-46981

CVE-2024-46981 poc para redis 6.2.11 crédito: https://github.com/p333zy/poc-redis...

CVE-2024-31449

CVE-2024-31449 Redis is an open source in-memory non-relational database. Summary Stack buffer overflow vulnerability in all versions of Redis that include the Redis Lua engine Related to the bit.tohex function in the Lua engine the bit module is used for bitwise operations The bit.tohex function...

Redis-RCE

Redis-RCE remote code execute for redis4 and redis5 python code from https://github.com/Ridter/redis-rce 通过加载so文件，扩展新命令system.exec进行 命令执行成功 strings explin.so |grep sys root@kitploit: system system.exec syserrlist.h sysnerr syserrlist syssiglist system.exec...

CVE-2025-49844

CVE-2025-49844 – Redis Lua Parser Use-After-Free Lua chunk-name GC race leading to Redis 8.2.1 use-after-free and remote code execution. Overview Redis embeds Lua 5.1 for scripting. In versions up to 8.2.1 the luaYparser function does NOT anchor the chunk name string on the Lua stack before...

CVE-2024-31989

CVE-2024-31989 CVE-Exploit for Argo CD This repository contains an exploit for CVE-2024-31989 that targets a Redis instance without a password in Argo CD. Description Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. This exploit leverages a vulnerability in Argo CD where ...

redisHack

redisHack Script dos en uno para detección y explotación de redis no autorizado y redisCVE-2022-0543 Instrucciones de uso:...

w12scan

w12scan W12scan is a network asset discovery engine that can automatically aggregate related assets for analysis and use. W12scan is also my graduation design. : Here is a web source program and the scanning end is at w12scan-client. Thinking Based on python3 + django + elasticsearch + redis...

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE zipmap doble liberación → ejecución remota de código TL;DR. Un payload DUMP malformado pasado a RESTORE desencadena una doble liberación en el cargador de hash-zipmap heredado de Redis. Con jemalloc predeterminado, la doble liberación es silenciosa el servidor sigue...

CVE-2022-0543

CVE-2022-0543 1.Introduction Redis Sandbox Escape Vulnerability CVE-2022-0543 POC&EXP 2.Usage root@kitploit: RedisRCE -help 查看帮助信息 RedisRCE -h 192.168.0.100:6379 无密码连接 //输入q退出程序 RedisRCE -h 192.168.0.100:6379 -p 123456 密码连接 3.Disclaimer This tool is only for learning, research, and self-checking...