347 matches found
cve-2021-44228-waf-tests
Simple bash script to test your WAF or other devices against Log4Shell attack strings and various bypasses Bypass tricks from: https://github.com/Puliczek/CVE-2021-44228-PoC-log4j-bypass-words To run: ./cve-2021-44228.sh -t -c Or to use the defaults of https://127.0.0.1 and 403: ./cve-2021-44228....
log4jhound
log4jhound Bash script that detects Log4j occurences in your projects and systems: unpacks JARs and analyzes their Manifest files, text search in source code. Usage: ./log4jhound.sh rootdirectory...
cosmicsting-validator
Un Cosmicsting POC, con un script bash para verificar todos nuestros sitios alojados y confirmar el parche. Este repositorio se proporciona para permitir que los propietarios de tiendas / anfitriones confirmen que el parche se ha aplicado en las tiendas. Dentro de check.bash, agregue dominios a l...
CVE-2021-4034
CVE-2021-4034 CVE-2021-4034 in Bash Script Usage: source curl -s https://raw.githubusercontent.com/azminawwar/CVE-2021-4034/main/exploit.sh...
CVE-2025-21385
SSRF Exploit Script This repository contains a script designed to perform an SSRF Server-Side Request Forgery exploit for testing and educational purposes. Use this tool responsibly and only in environments where you have explicit permission. Features Exploit SSRF vulnerabilities in target system...
CVE-2024-3094
CVE-2024-3094 XZ-Utils Vulnerability Checker and Fixer This Bash script checks for vulnerable versions of xz-utils installed on your system and offers to replace them with a stable, uncompromised version. Requirements wget tar make sudo Usage 1. Ensure you have the required dependencies installed...
CVE-2024-6387-OpenSSH-Vulnerability-Checker
CVE-2024-6387-OpenSSH-Vulnerability-Checker This repository contains a Bash script to check the OpenSSH version on Ubuntu systems and determine if it's vulnerable to known security issues. Features Checks the installed OpenSSH version on the system. Determines if the version is vulnerable to know...
CVE-1999-0524
CVE-1999-0524 Un script Bash para comprobar si los sistemas son vulnerables a la Divulgación de Fecha Remota mediante Solicitud de Marca de Tiempo ICMP CVE-1999-0524. Cómo usar 1. Asegúrate de que hping3 esté instalado y en tu PATH. 2. Crea un archivo que contenga los objetivos, en formato IPv4 y...
dns-zone-audit
DNS Zone Audit A lightweight Bash-based security tool for testing DNS zone transfer misconfigurations AXFR, associated with CVE-1999-0532. This script queries authoritative name servers for a domain and attempts full zone transfers. If successful, it indicates a critical DNS misconfiguration that...
defender
🛡️ Linux-Defender.sh 📝 Table of Contents 📌 Overview 🚀 Features 🐧 Supported Distros 📦 Tools Installed ⚙️ Installation Building from Source General 📦 Package Installation Debian .deb Package Arch Linux Package 🧰 Running the Defender 🧾 License 🙋♂️ Author ☕ Support & Contribution 📌 Overview Linux...
CVE-2025-24893
CVE-2025-24893 Bash POC script for RCE vulnerability in XWiki Platform Example usage: Setup a netcat listener: $ nc -nvlp Then run the script: $ chmod +x cve.sh $ ./cve.sh Affected versions: From 5.4 up to 15.10.11 From 16.0.0 up to 16.4.1 Disclamer This tool is for educational purposes only. I...
wp2shell-scan
wp2shell-scan Detect and clean upwp2shell CVE‑2026‑63030 compromise across one or many WordPress sites. wp2shell is the pre‑authentication remote‑code‑execution vulnerability fixed in WordPress 7.0.2 / 6.9.5 / 6.8.6 2026‑07‑17. A public PoC appeared within a day and mass‑exploitation followed...
ScannerBadEpoll
ScannerBadEpoll Verificador de Vulnerabilidad: Bad Epoll CVE-2026-46242 Verificador de Vulnerabilidad: Bad Epoll CVE-2026-46242 Desarrollado por Soluciones & Proyectos Franklin Soluciones tecnológicas con respaldo profesional Este es un script automatizado en Bash diseñado para auditar la versión...
iconvfix
iconvfix 用于修补 CVE-2024-2961 的 Bash 脚本 目前适用于 Centos7. 无保修, 请勿在生产系统上使用, 这只是一个内部辅助工具 : 用法 tsh ssh username@target sudo 'bash -s' iconvfix.sh...
terminalphone — Updated!
TerminalPhone Encrypted push-to-talk voice communication over Tor hidden services. TerminalPhone is a single, self-contained Bash script that provides anonymous, end-to-end encrypted voice and text communication between two or more parties over the Tor network. It operates as a walkie-talkie: you...
ZeroTrace
ZeroTrace ZeroTrace is a powerful ethical hacking tool for anonymization, developed in Bash. It helps you stay anonymous online by routing all of your system’s network traffic—not just browser traffic—through the Tor network. As a result, tracking your online activity, IP address, and location...
terminalphone — Updated!
TerminalPhone Encrypted push-to-talk voice communication over Tor hidden services. TerminalPhone is a single, self-contained Bash script that provides anonymous, end-to-end encrypted voice and text communication between two or more parties over the Tor network. It operates as a walkie-talkie: you...
firmwalker
firmwalker Простой bash-скрипт для поиска в извлеченной или смонтированной файловой системе прошивки. Он будет искать в извлеченной или смонтированной файловой системе прошивки интересующие элементы, такие как: etc/shadow и etc/passwd список каталога etc/ssl поиск файлов, связанных с SSL, таких к...
reconftw v5.0.0-beta.1
reconFTW reconFTW is a powerful automated reconnaissance tool designed for security researchers and penetration testers. It streamlines the process of gathering intelligence on a target by performing subdomain enumeration, vulnerability scanning, OSINT and more. With a modular design, extensive...
