CVE-2021-4045

Exploit Title: TP-LINK Tapo c200 1.1.15 - RCE Vendor: https://www.tp-link.com/en/home-networking/cloud-camera/tapo-c200/ Version: 1.1.15 and below CVE: CVE-2021-4045 Loadable C2 botnet & massexploit Write up of vuln: https://www.hacefresko.com/posts/tp-link-tapo-c200-unauthenticated-rce...

agent-bom

Open security scanner and self-hosted control plane for AI, MCP, and cloud infrastructure. Self-host · Deployment models · Quick start · Product tour · Docs agent-bom finds the AI agents, MCP servers, packages and credentials in...

CloudScraper

CloudScraper is a Tool to spider and scrape targets in search of cloud resources. Plug in a URL and it will spider and search the source of spidered pages for strings such as 's3.amazonaws.com', 'windows.net' and 'digitaloceanspaces'. AWS, Azure, Digital Ocean resources are currently supported...

CVE-2022-22947_Rce_Exp

CVE-2022-22947RceExp Spring Cloud Gateway Remote Code Execution Vulnerability Exp SpringCloudGatewayRCEExp-CVE-2022-22947...

checkov

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

cloudgoat

CloudGoat ☁️🐐...

CloudGrappler

CloudGrappler Permiso: https://permiso.io Read our release blog: https://permiso.io/blog/cloudgrappler-a-powerful-open-source-threat-detection-tool-for-cloud-environments CloudGrappler is a purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to...

Threat-Remediation-Scripts

Introduction Since 2021, I have developed a number of scripts to assist me with my investigations and remediation efforts. I figured, why not share them to the public, in hopes it helps you. How do these scripts work? The scripts I developed are intended to work with Crowdstrike Endpoint Detectio...

spring-cloud-gateway-rce

Spring Cloud Gateway Actuator API SpEL Expression Injection Command Execution CVE-2022-22947 1. Installation pip3 install -r requirements.txt 2. Usage $ python3 spring-cloud-gateway-rce.py -h / \ /\ /\ /\ | \ / \ | \ | \ | \ | \ / \ | || | | | / / \ \ / / /\ || | | | | | | || || || | / / / / \ V...

f8x

A brand-new IaC automated deployment tool RedC, built on Terraform + Wails GUI for automated multi-cloud deployment and project orchestration—give it a try! Red/Blue team environment automation deployment tool Start • Options • Example • FAQ • License English | 简体中文 WgpSec Infra Ecosystem Within...

pentest-book

description: - This book contains a bunch of info, scripts and knowledge used during my pentests. /home/six2dez/.pentest-book Thanks to visit this site, please consider enhance this book with some awesome tools or techniques you know, you can contact me by Telegram@six2dez, Twitter@six2dez1 or...

huntr-com-bug-bounties-collector

huntr.com bugs collector New bug bountyvulnerabilities collector Requirements Chrome with GUI If you encounter trouble with script execution, check the status of VMs GPU features, if available. Chrome WebDriver Preview python3 main.py 2024-02-20 16:14:47.836189 1. Arbitrary File Reading due to La...

CVE-2024-22263_Scanner

CVE-2024-22263Scanner For Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility. CVE-2024-22263: Spring Cloud Dataflow Arbitrary File Writing Usage ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗...

purple-team-exercise-framework

Purple Team Exercise Framework PTEF The Purple Team Exercise Framework PTEF is the industry standard methodology for designing and executing collaborative security exercises that bring together Cyber Threat Intelligence CTI, Red Teams, and Blue Teams. Purple Team Exercises are an efficient method...

hayat

Hayat Google Cloud Platform Auditing & Hardening Script What does that mean "Hayat"? Well, I had a hard time finding a unique name, honestly. "Hayat" is a Turkish word which means "Life" in English and also my niece's name. Ready to meet her? 😍 😍 😍 Hayat is a auditing & hardening script for Googl...

nextssrf

╔══════════════════════════════════════════════════════════════╗ ║ NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF ║ ║ Affected: 13.4.13 → 15.5.15, 16.0.0 → 16.2.4 ║ ║ @mitsec / ynsmroztas — Bug Bounty Tooling ║...

CVE-2026-41091-PoC-Exploit

CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender LPE Exploit Legal Disclaimer & Responsible Use This tool is provided for educational and authorized penetration testing purposes only. The authors and contributors are not responsible for any misuse or damage caused by this software. Users a...

kyverno

Kyverno Cloud Native Policy Management 🎉 📑 Table of Contents About Kyverno Non-Goals Documentation Demos & Tutorials Popular Use Cases Explore the Policy Library Getting Help Contributing Software Bill of Materials Contributors License About Kyverno Kyverno is a Kubernetes-native policy engine...

AzureHunter

A Powershell module to run threat hunting playbooks on data from Azure and O365 for Cloud Forensics purposes. Getting Started 1. Check that you have the right O365 Permissions The following roles are required in Exchange Online, in order to be able to have read only access to the UnifiedAuditLog:...

cli

CloudGraph is the free open-source universal GraphQL API and Cloud Security Posture Management CSPM tool for AWS, Azure, GCP, and K8s. With CloudGraph you get: Free and effortless compliance checks i.e. Azure CIS 1.3.1, GCP CIS 1.2, AWS CIS 1.2, AWS CIS 1.3, AWS CIS 1.4, AWS PCI 3.2.1, AWS NIST...