CVE-2026-23744

CVE-2026-23744 python script for exploiting CVE-2026-23744 how to use it : first thing you should open two terminals frist terminal -- nc -nvlp 4444 second terminal -- python CVE-2026-23744.py -lhost your ip -url target url for help menu : python CVE-2026-23744.py -h...

CVE-2026-23744-script

A script for CVE-2026-23744, which exploits MCPJam Inspector versions = 1.4.2. Based off the curl command used here: https://github.com/advisories/GHSA-232v-j27c-5pp6 Make sure your /etc/hosts file is correct and points to the domain/vhost of the target...

CVE-2025-55315-

CVE-2025-55315 Vulnerability Research This project contains research and analysis code for the CVE-2025-55315 vulnerability. Project Overview This repository is used to research and analyze the technical details, impact scope, and possible exploitation methods of the CVE-2025-55315 vulnerability...

MAL-2026-17690 Malicious code in @galicia-toolkit/spa-build-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7fc29f59609ed2b5c7b54243b740e1daa001f3c76c4d1391edd85a528a4688 The package's postinstall script runs automatically on npm install and collects installer-side host and credential data: hostname, username, network...

Aggressor-Aggregator

Aggressor Aggregator Description A helper script for consolidating Aggressor Script and Beacon Object File BOF repositories into a single CNA for Cobalt Strike. Designed for automation in red team CTF environments with frequent setup/destruction of operator clients. This script is essentially a...

CVE-2026-52102-PoC

CVE-2026-52102 - Exploit PoC A Proof of Concept PoC demonstrating CVE-2026-52102. Usage python3 CVE-2026-52102-PoC.py Targets Add one target per line to the targets.txt file. Note: Only include systems that you own or have explicit authorization to test. Example: https://example.local:8090...

CVE-2018-15473-User-Enumeration-

CVE-2018-15473 – SSH Username Enumeration A Python tool developed by me to identify valid SSH usernames by exploiting CVE-2018-15473. Target Information Service: SSH Version: OpenSSH 5.8p1 Debian 1ubuntu3 Operating System: Ubuntu Linux Protocol: SSH-2.0 Assessment: Tested for CVE-2018-15473 SSH...

CVE-2022-24834-

CVE-2022-24834 python exploit.py -url -port...

google-osconfig-privesc

Summary The googleosconfigagent process is a component GoogleCloudPlatform https://github.com/GoogleCloudPlatform/osconfig tooling, running on each VM by default. The agent is running as root and responsible for some user-controllable services, including OS config...

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution

Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution - Cisco Bug: CSCur90888 Exploit Title : Cisco UCS Manager - 2.21d - Remote Command Execution Description : An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System UCS Manager before 2.24b,...

php-8.1.0-dev-backdoor-rce

Ejecución remota de código mediante backdoor en PHP 8.1.0-dev Script de shell del sistema con backdoor para PHP 8.1.0-dev La versión de PHP 8.1.0-dev se publicó con un backdoor el 28 de marzo de 2021, pero el backdoor fue rápidamente descubierto y eliminado. Si esta versión de PHP se ejecuta en u...

Zeek-Endpoint-Enrichment-conn

Zeek-Endpoint-Enrichment-conn Enrich the conn.log with EDR data For detailed documentation, see https://docs.corelight.com...

icannTLD

icannTLD Corelight-update ahora se puede utilizar para crear y mantener los archivos de entrada de icannTLD. Descripción del script Script de Zeek que utiliza la lista oficial de dominios de nivel superior TLD de ICANN con el Input Framework para extraer la información relevante de una consulta D...

top-dns

Medición de Top DNS Resumen Este script utiliza un mecanismo de medición probabilística integrado en Bro para medir las principales solicitudes DNS por tipo de consulta, es decir, CNAME, A, AAAA, etc. realizadas durante un período de tiempo definible. Esto se registra en un nuevo log llamado...

SleuthQL

SleuthQL Description SleuthQL is a python3 script to identify parameters and values that contain SQL-like syntax. Once identified, SleuthQL will then insert SQLMap identifiers into each parameter where the SQL-esque variables were identified. Supported Request Types SleuthQL requires an export of...

bro-shellshock

ShellShock Detector for Bro This script detects successful exploitation of the Bash vulnerability with CVE-2014-6271 nicknamed "ShellShock". It's more comprehensive than most of the detections around in that it's watching for behavior from the attacked host that might indicate successful compromi...

gitbook-xss

gitbook-xss CVE-2019-19596 GitBook through 2.6.9 allows XSS via a local .md file By entering script in MD file, it can be executed by gitbook...

Mongodb-Redis-scan

Mongodb-Redis-scan Script de escaneo anónimo de mongodb-redis, compatible con el escaneo anónimo de mongodb y redis Script de escaneo anónimo de mongodb-redis, compatible con el escaneo anónimo de mongodb y redis; fue escrito anteriormente por una necesidad puntual y ahora lo comparto con todos...

Metinfo-6.1.2-SQL-injection

Metinfo-6.1.2-SQL-injection Metinfo 6.1.2 SQL injection script 0-sec.org...

Cobaltstrike-MS17-010

Cobaltstrike Aggressor Script ms17-010 exploit tool and scanner. 1. Download files in cobaltstrike's root folder. 2. Import "aggressor.cna" ms17-010 exploit tools just support win7 x64 and win2008 r2 pwn/Invoke-EternalBlue.ps1 from Empire getinfo/Invoke-EternalScan.ps1 from @vletoux...