CVE-2017-1000117

CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/VulApps/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...

reverie

reverie Automated Pentest Tools Designed For Parrot Linux this tool will make your basic pentesting task like Information Gathering, Security Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone git clone https://github.com/baguswiratmaadi/reverie ...

DoS-Braces-3.03

CVE-Candidate: Denial of Service in braces via Comma-Separated Brace Expansion Package: braces npm Version: 3.0.3 latest Severity: HIGH CVSS 7.5 CWE: CWE-400 Uncontrolled Resource Consumption Status: Unreported Note: This is an independent finding. CVE-2024-4068 addressed input length limiting...

CVE-2024-10793

CVE-2024-10793 CVE-2024-10793 poc exploit CVE-2024-10793.yaml script is needed to search for a plugin. CVE-2024-10793.sh script is the exploit itself. For post-exploitation, you can use beef-xss. Google dork: inurl:wp-content/plugins/wp-security-audit-log The WP Activity Log plugin for WordPress ...

whatportis

whatportis .. image:: https://github.com/opencve/opencve/workflows/Tests/badge.svg :target: https://github.com/ncrocfer/whatportis/actions/workflows/tests.yml .. image:: https://badge.fury.io/py/whatportis.svg :target: https://pypi.python.org/pypi/whatportis/ .. image::...

xc

XC Netcat like reverse shell for Linux & Windows. Features Windows root@kitploit: Usage: └ Shared Commands: !exit !upload uploads a file to the target !download downloads a file from the target !lfwd local portforwarding like ssh -L !rfwd remote portforwarding like ssh -R !lsfwd lists active...

scrying

NCC Group Scrying A new tool for collecting RDP, web and VNC screenshots all in one place This tool is still a work-in-progress and should be mostly usable but is not yet complete. Please file any bugs or feature requests as GitHub issues Motivation Since Eyewitness recently dropped support for R...

fprobe

FProbe FProbe - Sonda HTTP rápida Instalación root@kitploit: GO111MODULE=on go get -u github.com/theblackturtle/fprobe Características Toma una lista de dominios/subdominios y prueba si tienen servidores http/https funcionando. Optimiza RAM y CPU en tiempo de ejecución. Soporta puertos especiales...

yasuo

YASUO @0xsauby Description Yasuo is a ruby script that scans for vulnerable 3rd-party web applications. While working on a network security assessment internal, external, redteam gigs etc., we often come across vulnerable 3rd-party web applications or web front-ends that allow us to compromise th...

evildork

evildork👁️ Dorkea solo un dominio específico o todos los subdominios disponibles Dorkea un objetivo general probablemente una persona Genera una página de resultados HTML con todos los enlaces de los dorks Ten en cuenta que Google, después de varios intentos, añadirá algún captcha para verificar s...

versionscan

versionscan Versionscan is a tool for evaluating your currently installed PHP version and checking it against known CVEs and the versions they were fixed in to report back potential issues. PLEASE NOTE: Work is still in progress to adapt the tool to linux distributions that backport security fixe...

godehashed

Godehashed Una herramienta en golang que utiliza la API de dehashed.com para buscar activos comprometidos. Los resultados se pueden compilar en un CSV para su posterior análisis. Captura de pantalla Dehashed API Debes proporcionar una clave API a la herramienta. Consulta apikeytemplate.txt como...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

email-prediction-asterisks

ASTERISKS & OBELIX Email prediction asterisks es un script que te permite identificar los correos electrónicos ocultos tras asteriscos. Es una aplicación perfecta para analistas de OSINT y fuerzas de seguridad. Permite predecir de forma inteligente, utilizando filtraciones de Intelx, qué correos...

CVE-2026-9833

CVE-2026-9833 CVE ID: CVE-2026-9833 Vulnerability Type: Cross-Site Scripting XSS – Reflected XSS CWE: CWE-79 – Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' Severity: High CISA ADP CVSS v3.1: 7.1 Overview CVE-2026-9833 affects the Tag Groups – Advanced Way to...

usbpcap

USBPcap - Captura de paquetes USB para Windows El instalador para usuarios finales está disponible en: http://desowin.org/usbpcap La siguiente información está destinada únicamente a desarrolladores y usuarios avanzados. Resumen del directorio: USBPcapCMD - aplicación de espacio de usuario de...

vulmap

🌟 Vulmap - Web vulnerability scanning and verification tools Click here for the English Version Vulmap is a web vulnerability scanning and verification tool. It can scan and exploit vulnerabilities in webapps. Currently supported webapps include activemq, flink, shiro, solr, struts2, tomcat, unom...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

CVE-2021-44228

CVE-2021-44228 checker This is the repository for checking for vulnerability CVE-2021-44228. This is a PoC that only displays strings without any external class loading. It cannot be used for arbitrary code execution. How it works? Step 1: Run the server application The image...

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...