PwnedCheck

PwnedCheck PwnedCheck is a command-line tool for checking whether passwords have appeared in known data breaches using theHave I Been Pwned API and supports encrypted Bitwarden vaults exports. Features Check single passwords from the command line Process passwords from a file Accept pre-hashed...

CVE-2003-0358

CVE-2003-0358 Posting for historical reasons. snowcrash [email protected] https://github.com/snowcra5h/ Description Buffer overflow in 1 nethack 3.4.0 and earlier, and 2 falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges via a long -s command line...

CVE-2002-0740

CVE-2002-0740 SLRNPull Spool Directory Command Line Parameter Buffer Overflow Vulnerability Packetstorm publication at https://packetstormsecurity.com/files/25989/slrnpull.overflow.txt.html Securiteam publication at http://www.securiteam.com/unixfocus/5FP0R0K6UC.html Securityfocus publication at...

CVE-2000-0114

CVE-2000-0114 This a CVE I found it in VDP at hackerone Platform Steps to POC :- 1 - install " pip install CVE-2000-0114 " 2 - run " CVE-2000-0114 -u https://example.com " 3 - or you can run script...

jboss-_CVE-2017-12149

jboss-CVE-2017-12149 verifyCVE-2017-12149.jar provides command-line mode to verify the vulnerability. If the vulnerability exists, it returns a characteristic string. Simply execute the command: $ java -jar verifyCVE-2017-12149.jar http://xxx:8080 成功返回: vuln6581362514513155613jboss...

CVE-2024-1112

CVE-2024-1112 This is a PoC, I wrote for "ResHacker.exe" Heap overflow vulnerability. Usage Execute CVE-2024-1112.py, copy all string at created payload.txt then use it to as parameter to open ResHacker.exe ResHacker.exe $string NOTE: Don't forget the find correct address - You can find full...

sshpass-win32

sshpass-win32 Like https://linux.die.net/man/1/sshpass Pre-Requirements To run sshpass, you must install: Windows 10 Insider build 17733 or later Install Winget winget install xhcoding.sshpass-win32 Scoop scoop install sshpass Usage Usage: sshpass options command arguments -h, --help show this he...

gtfobins-cli

🚀 GTFOBins CLI Overview GTFOBins CLI is a command-line interface for GTFOBins, providing instant access to Unix binary exploitation techniques. This tool helps security professionals and system administrators identify and understand how legitimate Unix binaries can be misused to bypass security...

amcache-evilhunter

AmCache-EvilHunter AmCache-EvilHunter is a command-line tool to parse and analyze Windows Amcache.hve registry hives, identify evidence of execution, suspicious executables, and integrate VirusTotal/OpenTIP lookups for enhanced threat intelligence...

CVE-2011-3192

CVE-2011-3192 Run it using python 3.7 or 3.10 tested on it 1. git clone https://github.com/futurezayka/CVE-2011-3192.git 2. cd ./CVE-2011-3192 3. pip install -r requirements.txt 4. python3 exploit.py host tasks example python3 exploit.py https://example.com 50...

Invoke-ArgFuscator

░█░█▄░█░█▒█░▄▀▄░█▄▀▒██▀░▒░ ▄▀▄▒█▀▄░▄▀▒▒█▀░█▒█░▄▀▀░▄▀▀▒▄▀▄░▀█▀░▄▀▄▒█▀▄░ ░█░█▒▀█░▀▄▀░▀▄▀░█▒█░█▄▄░▀▀░█▀█░█▀▄░▀▄█░█▀░▀▄█▒▄██░▀▄▄░█▀█░▒█▒░▀▄▀░█▀▄░ Invoke-ArgFuscator Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common...

ctftools

CTF-Tool Database Twitter: @hydr0nium Dependencies: sudo apt install python2 Installation: git clone https://github.com/white-hood/ctftools.git cp .ctftools cd /bin ln -s ctftools /path/to/ctftools.py Usage: ./ctftools | normal use ./ctftools --remove | remove tool from database ./ctftools --add ...

zkar

ZKar ZKar is a Java serialization protocol analysis tool implement in Go. This tool is still work in progress , so no complete API document and contribution guide. ZKar provides: A Java serialization payloads parser and viewer in pure Go, no CGO or JDK is required From the Java serialization...

gcp_scanner

Disclaimer This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose. GCP Scanner This is a GCP resource scanner that can help determine what level of acces...

sigma-cli

Sigma Command Line Interface This is the Sigma command line interface using the pySigma library to manage, list and convert Sigma rules into query languages. Getting Started Installation The easiest way to install the Sigma CLI is via pipx or pip. For this purpose run one of the following: python...

cwe-tool

cwe-tool A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration. Official OWASP CWE Toolkit Page Install Executable with Node.js tooling If you have a Node.js environment, you can invoke cwe-tool using the npx tool as follows: npx cwe-tool ...command-lin...

preflight

Preflight.sh Preflight.sh is a command-line tool that scans your codebase for launch readiness. Identifies missing configuration, integration issues, security concerns, SEO metadata gaps, and other common mistakes before you deploy to production. Don't embarrass yourself in production. Just run t...

CVE-2018-8639-EXP

CVE-2018-8639-EXP CVE-2018-8639 EXP Usage: CVE-2018-8639-EXP.exe command etc 1. Most open-source samples may no longer be capable of bypassing antivirus; modifications are required. 2. I believe that open-sourcing the core code can help those who want to learn. 3. I have learned a lot from the...

CVE-2020-24972

So CVE-2020-24972 spans from another cve in actually. I don't remember the cve that got designated but it has to do with platformpluginpath cmdline option from qt. So in essence the problem comes from using qt, persee the option platformpluginpath . "This parameter is supposed to contain a...

WHOREPRESS

Wordpress login checker Install npm install --global whorepress Usage make sure you have a list with format url:username:pass whorepress list.txt Arguments list Arguments| Description ---|--- --admin-only| check only for admin priviledge --debug| debug error output --output| Output file Author...