356 matches found
cyclepatrol
CyclePatrol re-invented wifi WarDriving -informational CyclePatrol is one Bash script, cp.sh. It is a Wi-Fi security assessment tool for the terminal. It runs on Linux and Android Kali NetHunter. It needs root. The tool runs in a loop. In each round it: 1. scans nearby Wi-Fi networks, 2. parses...
shiguresh
Shiguresh...
F5-BIG-IP-CVE-2020-5902-shodan-scanner
F5-BIG-IP-CVE-2020-5902-checker Simple bash script of F5 BIG-IP CVE-2020-5902 checker using Shodan CLI Requirement: Shodan-CLI : pip install -U --user shodan" https://help.shodan.io/command-line-interface/0-installation Disclaimer: The script is for security analysis and research only, hence I...
procinfo
procinfo A portable process inspector for Linux and macOS. Get details about any running process instantly! Also see procinfominimal.sh - pure sh implementation of procinfo. Installation curl -fsSL https://raw.githubusercontent.com/wenekar/procinfo/main/procinfo.sh -o procinfo chmod +x procinfo...
ASLRay
ASLRay Linux ELF x32/x64 ASLR DEP/NX bypass exploit with stack-spraying Properties: ASLR bypass DEP/NX bypass Cross-platform Minimalistic Simplicity Unpatchable Dependencies: Linux 2.6.12+ - would work on any x86-64 Linux-based OS BASH - the whole script Limitations: Stack needs to be executable...
revisaxzutils
revisaxzutils Bash script to check if you have the CVE-2024-3094 vulnerability. Installation Quick installation for Ubuntu, Kali Linux, Parrot git clone https://github.com/hackingetico21/revisaxzutils.git cd revisaxzutils chmod +x ./revisaxzutils.sh...
debian11-dirty_pipe-patcher
debian11-dirtypipe-patcher This Project is still under development Since the Debian 11 still comes with the kernel version 5.10, which is vulnerable to the Dirty Pipe Vulnerability, this scirpt is made for manually compile and install the kernel version 5.18 which is not vulnerable. Usage 1. Clon...
CVE-2021-4034
CVE-2021-4034 CVE-2021-4034 in Bash Script Usage: source curl -s https://raw.githubusercontent.com/azminawwar/CVE-2021-4034/main/exploit.sh...
log4jhound
log4jhound Bash script that detects Log4j occurences in your projects and systems: unpacks JARs and analyzes their Manifest files, text search in source code. Usage: ./log4jhound.sh rootdirectory...
CVE-2022-37706
Description Taken from https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2022-37706. Worked on: Distributor ID: Ubuntu Description: Ubuntu 20.04.6 LTS Release: 20.04 Codename: focal USAGE 1. Copy/Upload the exploit to the vulnerable machine. 2. Issue the command bash ./exploit.sh...
bincrypter
Privacy and copyright protection for your programs A Linux Binary Runtime Crypter - in BASH! Obfuscate & encrypt any ELF binary Obfuscate & encrypt any SHELL-script AV/EDR death: Morphing + different signature every time 100% in-memory. No temporary files Not soiling the filesystem Double or trip...
kaboom
About Kaboom is an automatism for penetration tests. It performs several tasks for the first two phases of the test: information gathering and vulnerability assessment. All informations collected are saved into a directory hierarchy very simple to browse also in case of multiple targets. Details...
Bulk_403_Bypass
Bulk 403 Bypass This is a Bash script that performs bulk 403 bypass by adding a custom header to HTTP requests. It can be useful for testing whether a website is vulnerable to 403 bypass techniques. Usage To use the script, pass in a list of URLs as a command line argument: ./403bypass.sh urls.tx...
4-ZERO-3
Introduction 4-ZERO-3 Tool to bypass 403/401. This script contain all the possible techniques to do the same. NOTE : If you see multiple 200 Ok/bypasses as output, you must check the Content-Length. If the content-length is same for multiple 200 Ok/bypasses means false positive. Reason can be...
terminalphone
TerminalPhone Encrypted push-to-talk voice communication over Tor hidden services. TerminalPhone is a single, self-contained Bash script that provides anonymous, end-to-end encrypted voice and text communication between two or more parties over the Tor network. It operates as a walkie-talkie: you...
CVE-2026-31431-Copy-Fail
CVE-2026-31431 - Verification and Mitigation Script This repository documents a Bash script used to assess exposure to CVE-2026-31431 on Linux hosts, with a focus on Ubuntu, and to apply a simple mitigation by blocking the algifaead module. Language versions: English: README.md Portuguese:...
virustotalx
virustotalx for endpoints virustotalx for IPs V2 Installation git clone https://github.com/orwagodfather/virustotalx.git cd virustotalx create a 3 accounts https://www.virustotal.com/gui/join-us and copy the 3 api keys === nano orwa.sh & nano orwaV2.sh paste 3 api keys here .... if $apikeyindex -...
sub.sh
π―πΈπ MultiprocessingParallelSubdomain Detect Script β¨ πΊSub.sh but without API key π» https://github.com/cihanmehmet/sub.sh βΌοΈ jq , httprobe and parallel required π π β Used Services + https://crt.sh + http://web.archive.org + https://dns.bufferover.run + https://www.threatcrowd.org +...
CVE-2020-5902
CVE-2020-5902 Exploit for CVE-2020-5902 POC bash version...
webcopilot
WebCopilot An automation tool that enumerate subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for vulnerabilities. Features β’ Installation β’ Usage β’ WebCopilot β’ Tools Used β’ Acknowledgement WebCopilot is an automation tool designed to enumerate...