14825 matches found
weevely3
Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...
CVE-2020-14882-WebLogic-Analysis
Vulnerability Research: Exploitation of the CVE-2020-14882 and CVE-2020-14883 Chain in Oracle WebLogic Server The repository contains a technical report Write-up and a conceptual Proof of Concept PoC demonstrating the chained Authentication Bypass and Remote Code Execution RCE vulnerabilities in...
TIBCO Security Advisory: September 29, 2026 - TIBCO Administrator - CVE-2026-4034
TIBCO Administrator Injection Vulnerability Original release date: September 29, 2026 Last revised: --- CVE-2026-4034 Source: TIBCO Software Inc. Description Multiple Injection vulnerability has been discovered in TIBCO Administrator. Refer below for further details Products Affected TIBCO...
symfony
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Symfony is used by thousands of web applications and most of the popular PHP projects. Installation Install Symfony with Composer see requirements details. Symfony follows the semantic versioning...
CVE-2022-29548
Proof of concept exploit for CVE-2022-29548: A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server...
mec
mec MassExploitConsole Intended for mass exploiting Follow thewiki to get started Features Easy-to-use CLI UI Execute adpated exploits with process-level concurrency Built-in exploits automated Hide your IP using proxychains4 and proxypool ZoomEye host scan 10 threads Simple Baidu crawler...
The vulnerability of the control console of the MaxPatrol EDR detection and response system allows a perpetrator to trigger a service failure.
The vulnerability of the control console of the MaxPatrol EDR detection and response system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the QAFA Firmware for telecommunications equipment lies in its ability to bypass authentication using a user-controlled key. This allows attackers to gain access to the administrative web console.
The vulnerability of the QAFA Firmware for telecommunications equipment relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the administrative web console...
sliver-gui
Sliver GUI A desktop operator console for the Sliver C2 framework in the spirit of Cobalt Strike and Havoc. Designed and Developed by Raj Kumar Mullapudi Sliver GUI is a thin Wails v2 Go + plain HTML/CSS/JS frontend over Sliver's existing rpcpb.SliverRPC gRPC service. It reimplements no C2 logic...
Bastillion
Bastillion Una consola SSH moderna basada en web y una herramienta de gestión de claves SSH. Bastillion te ofrece una forma limpia, basada en navegador, de gestionar el acceso SSH en todos tus sistemas — como un bastion host con un panel amigable. Hace dos cosas: 1. Terminal SSH basada en web — u...
OpenFire_Decrypt
OpenFireDecrypt Decrypt the admin console account password of OpenFire install openfire https://hub.docker.com/r/sameersbn/openfire docker pull sameersbn/openfire:3.10.3-19 docker run --name openfire -d --restart=always \ --publish 9090:9090 --publish 5222:5222 --publish 7777:7777 \ --volume...
SharpRDP
SharpRDP - Aplicación de consola de Protocolo de Escritorio Remoto para ejecución de comandos autenticados Compilación Para compilar, abra el proyecto en Visual Studio y compile para Release. Se generarán dos DLL en el directorio Release, pero no las necesita porque las DLL están incluidas en el...
cloudsploit
CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...
CVE-2024-50498
CVE-2024-50498 Affected Version WP Query Console =1.0 Credit https://github.com/RandomRobbieBF/CVE-2024-50498 Premise Query Type is WPQuery and WP Query Console executes some php functions Usage python .\CVE-2024-50498.py 192.168.41.163 --query "id"...
crestron_getsudopwd
crestrongetsudopwd Based on Ricky Lawshae discovery on Crestron TSW-X60 and MC3 devices, this tool aims to exploit the CVE-2018-13341. Using the MAC address of the targeted device, you can recover the password of the "crengsuperuser" hidden account which has elevated privileges and allow you to r...
CVE-2024-0507_CVE-2024-0200-github
Intro This repository contains exploits we have developed for GitHub Enterprise vulnerabilities CVE-2024-0507 and CVE-2024-0200. Check out the full writeup at https://blog.convisoappsec.com/en/analysis-of-github-enterprise-vulnerabilities-cve-2024-0507-cve-2024-0200/ CVE-2024-0507 Privilege...
fas-judgement-oss
FAS Judgement Prompt Injection Attack Console Test your AI's defenses before someone else does. Install | Game Mode | Leaderboard | Demo Target | Features | Elite | Contributing Why Judgement? Your AI chatbot, API, or agent is probably vulnerable to prompt injection. Most are. The problem is that...
br0w
br0w Hack The Br0w | Juega con tu navegador y aprende más, ¡hackea divertido!! Br0w es una web sencilla para aprender sobre seguridad web usando el navegador como herramienta que a veces la gente olvida sus mayores beneficios. Quizás es más como un Capture The Flag CTF. Uno de los desafíos es...
killchain
killchain “Kill Chain” es una consola unificada con un anonimizador que realizará estas etapas de ataques: Reconnaissance Weaponization Delivery Exploit Installation Command & Control And Actions Los conjuntos de herramientas dependientes son: 1. Tor -- Para el Anonimizador integrado en la consol...