CVE-2024-22120-RCE

CVE-2024-22120 ToolKit Affected Version/s 6.0.0 - 6.0.27 6.4.0 - 6.4.12 7.0.0alpha1 Credit https://x.com/mf0cuz https://support.zabbix.com/browse/ZBX-24505 https://packetstormsecurity.com/files/137454/Zabbix-3.0.3-Remote-Command-Execution.html Premise a low-privilege user Have permission to execu...

Twitter-Info

Twitter Info A simple python script to grab Twitter account info like: Name Following Followers Likes Account date Profile picture just by username or profile link. Usage python3 twitterinfo.py or Example Input python twitterinfo.py ngll Output Name: Nigella Tweets: 30 Following: 8 Followers: 4...

Invoke-EDRChecker

Invoke-EDRChecker El script verificará los procesos en ejecución, los metadatos de procesos, las DLL cargadas en el proceso actual y los metadatos de cada DLL, los directorios de instalación comunes, los servicios instalados, el registro y los controladores en ejecución para detectar la presencia...

deepce

deepce . == === /"""""""""""""""""/ === / ===- \ X / \ \ / \/ / / / / / / / / \ ENUMERATE / // / / / // / / / ESCALATE ,/// ./// ESCAPE // Website Docker Enumeration, Escalation of Privileges and Container Escapes DEEPCE In order for it to be compatible with the maximum number of...

pe-sieve

Intro PE-sieve is a tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps variety of implants within the scanned process: replaced/injected PEs, shellcodes, hooks, and other in-memory patches...

ZSC

OWASP ZSC ESTE SOFTWARE FUE CREADO PARA DESAFIAR LA TECNOLOGÍA ANTIVIRUS, INVESTIGAR NUEVOS MÉTODOS DE CIFRADO Y PROTEGER ARCHIVOS DE CÓDIGO ABIERTO SENSIBLES QUE CONTIENEN DATOS IMPORTANTES. LOS COLABORADORES Y LA FUNDACIÓN OWASP NO SERÁN RESPONSABLES POR CUALQUIER USO ILEGAL. OWASP ZSC es un...

ReconDog

ReconDog Reconnaissance Swiss Army Knife Main Features Wizard + CLA interface Can extracts targets from STDIN piped input and act upon them All the information is extracted with APIs, no direct contact is made to the target Utilities Censys: Uses censys.io to gather massive amount of information...

CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass

ConnectWise ScreenConnect: Authentication Bypass Introduction This project aims to exploit an authentication bypass vulnerability in ConnectWise ScreenConnect. It provides a script to demonstrate the exploit. Please ensure you have the necessary permissions before attempting to use this script...

CVE-2023-28343

CVE-2023-28343 CVE-2023-28343 POC exploit Usage usage: exploit.py -h -t TARGET -l LOCALHOST -p LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET Target url, http://localhost:9000 -l LOCALHOST, --localhost LOCALHOST Local IP address for reverse she...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 POC exploit Usage usage: exploit.py -h -t TARGET -l LIST -c COMMAND optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET The IP address of the target, eg: 127.0.0.1:9443 -l LIST, --list LIST List of target url saperated with new lin...

CVE-2020-3187-Scanlist

CVE-2020-3187-Scanlist - Cisco Batch scanning site. Disclaimer: I am not responsible for the use of this tool or any damages, DO NOT USE THIS FOR ILLEGAL PURPOSES. This tool was designed to scan for authorised assets to automate the check for this vulnerability on multiple cisco instances. Instal...

CVE-2024-4577

CVE-2024-4577 usage: CVE-2024-4577.py -h -v RHOST RPORT URL COMMAND PHP CGI CVE-2024-4577 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 positional arguments: RHOST remote host RPORT remote port URL target address COMMAND command to execute e.g. optional arguments: -h, --help show...

CVE-2018-7600

CVE-2018-7600 python3 exploit.py...

CVE-2018-7600

CVE-2018-7600 Testing and exploitation tool for Drupalgeddon 2 CVE-2018-7600 Install: sudo pip install -r requirements.txt python Drupalgeddon2.py -t http://drupal.org -c id...

CVE-2022-30525

CVE-2022-30525 Zyxel firewall remote command injection vulnerability CVE-2022-30525 batch detection script The script only provides testing functionality, does not contain actual attack requests, and is only for security detection. All behaviors of using the script for illegal testing are unrelat...

pythonprojects-CVE-2018-10933

pythonprojects-CVE-2018-10933 CVE-2018-10933 This script exploits the CVE-2018-10933 vulnerability works on linux You need paramiko python module to execute this script. Please install paramiko using below command. pip install paramiko Once paramiko is installed, the script can be executed as...

CVE-2024-6387_PoC

CVE-2024-6387 PoC This Bash script is designed to check if a server is running a vulnerable version of OpenSSH based on its SSH banner. It verifies if the SSH port is open and examines the banner response to determine if it matches any known vulnerable versions. Usage 1. Clone the Repo git clone...

SSH-User-Enum-Python3-CVE-2018-15473

SSH-User-Enum-Python3-CVE-2018-15473 SSH User Enumerator in Python3, CVE-2018-15473, I've updated the code of this exploit https://www.exploit-db.com/exploits/45939 to work with python3 instead of python2, and I'm trying to implement functionalities to enumerate more users instead of only one...

heartbleed-poc

HeartBleed Tester & Exploit NB Nearly all the tools nmap, metasploit, nessus, even burp have the most up to date versions of their scanners. These tools were released at the early stages when tools were still being developed. Rather use those than these now. Tool Guide If you want to mass scan, t...

CVE-2025-55182-Exploit

CVE-2025-55182 – React Server Components RCE Exploit ⚠️ Disclaimer: For authorized security testing and research purposes only. Do not use against systems without explicit permission. Overview This is an improved version of the exploit script for CVE-2025-55182 React Server Components Remote Code...