CVE-2023-25136

OpenSSH Pre-Auth Double Free CVE-2023-25136 POC This repository contains a Proof of Concept POC script to check for the OpenSSH Pre-Auth Double Free vulnerability CVE-2023-25136 using the Paramiko library in Python. Prerequisites Before running this POC script, you need to make sure you have the...

VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972

VMwarevCenterUNAuthorizedRCECVE-2021-21972 zoomeye dork: app:"VMware vCenter" A harmless detection script written using pocsuite3 VMwarevCenterUNAuthorizedRCE.py, using nearly a year of data for detection: Success rate approximately: 1551 / 3998 = 39%...

aws-key-disabler

AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...

CVE-2019-0708poc

CVE-2019-0708poc Just constructed a batch detection script based on the single-IP detection tool for CVE-2019-0708 developed by 360Vulcan Team Only a single-threaded version was written.. haven't had time to implement multi-threading yet...

dotNetPELoader

dotNetPELoader Security Notice Recently, I discovered an unofficial modified version of this project being redistributed outside of this repository. After reviewing the files, I identified additional hidden components and script-loading behavior that do NOT exist in the official source code. Plea...

Insta-Crawler

Insta Crawler A python script designed to generate a random instagram pictures ids and try it Screenshot...

CVE-2024-50379-PoC

See more PoCs at https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Script Usage Batch detection: python poc.py -f url.txt Single detection: python poc.py -u your-ip...

Arcane

Arcane is a simple script designed to backdoor iOS packages iphone-arm and create the necessary resources for APT repositories. It was created for this publication to help illustrate why Cydia repositories can be dangerous and what post-exploitation attacks are possible from a compromised iOS...

katoolin

katoolin Automatically install all Kali linux tools Features Add Kali linux repositories Remove kali linux repositories Install Kali linux tools Requirements Python 2.7 An operating system tested on Ubuntu Installation sudo su git clone https://github.com/LionSec/katoolin.git && cp...

HT-WPS-Breaker

HT-WPS BREAKER Languages: English High Touch WPS Breaker HT-WB is a small tool based on the bash script language, it can help you to extract the wps pin of many vulnerable routers and get the password, in the last i want to notice that HT-WPS Breaker in its process is using these tools :...

diskwalker

Diskwalker a simple script to walk your disk and keep track of interesting sets of files After gaining access to a remote machine during penetration testing, you might want to find interesting configuration files or binaries to attempt a privilege escalation. The script is self contained, and wor...

Parsero

What's Parsero? Parsero is a free script written in Python which reads the Robots.txt file of a web server and looks at the Disallow entries. The Disallow entries tell the search engines what directories or files hosted on a web server mustn't be indexed. For example, "Disallow: /portal/login"...

awesome

Check out my macOS app Supercharge Elevate your Mac experience My open source work is supported by the community Special thanks to: Fast remote container builds and GitHub Actions runners. Get the most out of every conversation. AI-powered meeting notes, automations, and search. Give AI agents th...

Log4j-Updater

Log4j Updater With the inevitable need to update the famous Java framework called Log4j, numerous companies are needing to update Log4j on several computers at the same time, which takes time and cost, and that's where the Log4j Updater comes in. log4jupdater.sh is a simple bash script with the a...

thinkphp5.XRce

ThinkPHP5.0 Vulnerability Detection Script Rewritten based on @tdcoming's script Introduction: Affected versions: v5.1.x 5.1.31 v5.0.x = 5.0.23 Usage: 1. pip install -r requirements.txt 2. Create url.txt in the script directory 3. Put the URLs to be tested into it 4. Run the script Screenshot:...

OnionSearch

OnionSearch 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! For BTC Donations : 1FHDM49QfZX6pJmhjLE5tB2K6CaTLMZpXZ...

PS2EXE

AI free repository - artificial intelligence is killing creativity and our nature! PS2EXE Overworking of the great script of Ingo Karstein with GUI support. The GUI output and input is activated with one switch, real windows executables are generated. Compiles only Powershell 5.x compatible...

PolyDrop

BYOSI - Bring-Your-Own-Script-Interpreter - Leveraging the abuse of trusted applications, one is able to deliver a compatible script interpreter for a Windows, Mac, or Linux system as well as malicious source code in the form of the specific script interpreter of choice. Once both the malicious...

MemITM

What's the MemITM tool? The MemITM Mem In The Middle tool has been developped in order to easily intercept "messages" in Windows processes memory. We developped a lot of custom memory interception tools in order to capture network messages before encryption, or IPC messages, and to be able to...

linux-soft-exploit-suggester

linux-soft-exploit-suggester Script to find exploits for all vulnerable software on the system, targeting software packages rather than just kernel vulnerabilities. It uses the exploit database to assess the security of packages and search for exploits to help with privilege escalation. Usage...