DumpBrowserSecrets

DumpBrowserSecrets Extrae datos almacenados en navegadores como tokens de actualización, cookies, credenciales guardadas, tarjetas de crédito, entradas de autocompletar, historial de navegación y marcadores de navegadores modernos basados en Chromium y Gecko Chrome, Microsoft Edge, Firefox, Opera...

MantisBT < 2.25.2 - Cross-Site Scripting

MantisBT before 2.25.2 contains a cross-site scripting vulnerability in browsersearchplugin.php. The application does not properly sanitize the 'type' parameter, which allows attackers to inject arbitrary web script or HTML via a crafted URL. id: CVE-2022-28508 info: name: MantisBT 2.25.2 -...

PAN-OS - Reflected Cross-Site Scripting

A reflected cross-site scripting XSS vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they click on a specially crafted link.The...

EyouCMS 1.5.4 Open Redirect

EyouCMS 1.5.4 is vulnerable to an Open Redirect vulnerability. An attacker can redirect a user to a malicious url via the Logout function. id: CVE-2021-39501 info: name: EyouCMS 1.5.4 Open Redirect author: 0xAkoko severity: medium description: EyouCMS 1.5.4 is vulnerable to an Open Redirect...

Zimbra Collaboration Suite - Memcached Command Injection

Zimbra Collaboration Suite versions 8.8.15 and 9.0 contain a memcached command injection vulnerability that allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance, leading to cache poisoning and potential credential theft. id: CVE-2022-27924 info: name:...

Haraj 3.7 - Cross-Site Scripting

Haraj 3.7 contains a cross-site scripting vulnerability in the User Upgrade Form. An attacker can inject malicious script and thus steal authentication credentials and launch other attacks. id: CVE-2022-31299 info: name: Haraj 3.7 - Cross-Site Scripting author: edoardottt severity: medium...

siemframework

SIEMS FRAMEWORK MultiSIEM Modular Python3 Attack Framework By ElevenPaths https://www.elevenpaths.com/ Usage: python3 ./siemsframework.py INTRODUCTION SIEMs are defensive tools increasingly used in the field of cybersecurity, especially by major companies and companies intended to monitor highly...

REALITY_SMASHER

REALITYSMASHER vRealize RCE + Privesc CVE-2021-21975, CVE-2021-21983, CVE-0DAY-????? "As easy to stop as it is to comprehend." What is it? "Reality Smasher" is an exploit for vRealize leveraging the security issues addressed in VMSA-2021-0004 CVE-2021-21975, CVE-2021-21983 in addition to a...

SharpHook

SharpHook SharpHook is inspired by the SharpRDPThief project, It uses various API hooks in order to give us the desired credentials. In the background it uses the EasyHook project, Once the desired process is up and running SharpHook will automatically inject its dependencies into the target...

Impost3r

Impost3r Impost3r is a tool that aim to steal many kinds of linux passwordsincluding ssh,su,sudo written by C Attackers can use Impost3r to make a trap to steal the legal user's passwords XD This tool is limited to security research and teaching, and the user bears all legal and related...

CVE-2021-21983

CVE-2021-21975 VMware vRealize Operations vROps Manager API Arbitrary File Write Leads to Remote Code Execution RCE vRealize Operations vROps is a tool that self-driving IT operations management powered by AI from apps to infrastructure to optimize, plan and scale VMware Cloud and HCI deployments...

evil-ssdp

अवलोकन यह उपकरण SSDP मल्टीकास्ट डिस्कवर अनुरोधों का जवाब देता है, एक सामान्य UPNP उपकरण के रूप में प्रस्तुत होता है। आपका नकली उपकरण आपके स्थानीय नेटवर्क पर मौजूद मशीनों के विंडोज एक्सप्लोरर में जादुई रूप से दिखाई देगा। जो उपयोगकर्ता उपकरण को खोलने के लिए ललचाते हैं, उन्हें एक कॉन्फ़िगरेबल फ़िशिं...

VindicateTool

Vindicate -brightgreen An LLMNR/NBNS/mDNS Spoofing Detection Toolkit for network administrators What is Vindicate? Vindicate is a tool which detects name service spoofing, often used by IT network attackers to steal credentials e.g. Windows Active Directory passwords from users. It's designed to...

eaphammer

गेब्रियल रयान द्वारा s0lst1c3 वर्तमान रिलीज़: v1.14.1 Python 3.9+ का समर्थन करता है। अवलोकन EAPHammer एक टूलकिट है जो WPA2-Enterprise नेटवर्कों के विरुद्ध लक्षित इविल ट्विन हमलों को अंजाम देने के लिए डिज़ाइन किया गया है। इसका उपयोग पूर्ण-स्कोप वायरलेस मूल्यांकन और रेड टीम अभियानों में किया जाना ह...

ritecms

🛡️ CVE-2024-28623 – RiteCMS v3.0.0 में XSS कमज़ोरी 🔍 अवलोकन यह रिपॉजिटरी RiteCMS v3.0.0 में खोजी गई एक क्रॉस-साइट स्क्रिप्टिंग XSS कमज़ोरी का दस्तावेज़ीकरण करती है, जिसे मैंने रिपोर्ट किया था और इसे CVE आईडी CVE-2024-28623 प्रदान की गई। 📄 कमज़ोरी का विवरण CVE ID : CVE-2024-28623 उत्पाद : RiteCMS...

ntlm_theft

ntlmtheft A tool for generating multiple types of NTLMv2 hash theft files. ntlmtheft is an Open Source Python3 Tool that generates 21 different types of hash theft documents. These can be used for phishing when either the target allows smb traffic outside their network, or if you are already insi...

CamRaptor

CamRaptor CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain network camera credentials. Features Exploits vulnerabilities in most popular camera models such as Novo, CeNova and QSee. Optimized to exploit multiple cameras at one time from list with threadin...

EvilSelenium

EvilSelenium EvilSelenium es un nuevo proyecto que weaponiza Selenium para abusar de navegadores basados en Chromium. Las funcionalidades actuales son: Robar credenciales almacenadas mediante autofill Robar cookies Tomar capturas de pantalla de sitios web Volcar correos de Gmail/O365 Volcar...

ConTroll_Remote_Access_Trojan

DISCLAIMER ConTroll is for education/research purposes only. The author takes NO responsibility and/or liability for how you choose to use any of the tools/source code/any files provided. The author and anyone affiliated with will not be liable for any losses and/or damages in connection with the...

Reflected-XSS-in-Vvveb-CMS-v1.0.7.2

Reflected XSS in Login Form Email & Password Fields Vvveb CMS v1.0.7.2 Author: Andrew Paul Date of Discovery: August 12th, 2025 Vendor: Vvveb Vendor URL: http://vvveb.com Vendor GitHub: https://github.com/givanz/Vvveb Affected Version: 1.0.7.2 and likely prior versions CVE ID: CVE-2025-9728 Summa...