CVE-2023-46805

19/01/2024 Update Updated with the latest info based on Assetnote's blog. Now three checks are executed before a status is shown, this also to better detect older versions of Avanti Blogs with analysis of the CVE: https://attackerkb.com/topics/AdUh6by52K/cve-2023-46805/rapid7-analysis...

PS-CVE-2021-44228

PS-CVE-2021-44228 Static detection of vulnerable log4j librairies on Windows members of an AD domain. Uses detection tool binary provided by @1lann : https://github.com/1lann/log4shelldetect Prerequisites Administrator privileges on targeted computers. Active Directory PowerShell module...

CVE-2025-4123-Exploit

CVE-2025-4123 PoC A small proof-of-concept tool — sends a specific payload to a target and checks for 301/302 redirect responses, reporting the Location header. This repository is intended for educational/research purposes only. Follow responsible disclosure policies. Below are usage and build...

-nginxui_discover

Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/threading-multi--threaded-brightgreen Author: NULL200OK A high‑performance, multi‑threaded scanner to discover...

vulescanjndilookup

vulescanjndilookup AUTOMATED TOOL FOR DETECTING VULNERABILITY CVE-2021-44228 Requirements: Python v. 3 Installation: git clone https://github.com/MiguelM001/vulescanjndilookup.git Execution: python3 vulescanjndilookup.py -h python3 vulescanjndilookup.py -d / python3 vulescanjndilookup.py -d...

Ubuntu-CVE-2026-3888-patcher

🛡️ Script di Rimedio per CVE-2026-3888 Strumento di Advisory di Sicurezza di Many Hat Group Panoramica Questo script è stato sviluppato da Many Hat Group per identificare e rimediare rapidamente ai sistemi affetti da CVE-2026-3888 in ambienti Ubuntu. È progettato per l'uso su flotte gestite,...

Honeypot-for-CVE-2025-59287-WSUS

wsus-decoy Defensive proof of concept decoy for CVE-2025-59287 WSUS. The decoy emulates WSUS web endpoints on ports 8530 and 8531, captures full HTTP request bodies and headers, stores evidence for forensic analysis, and includes a Windows test harness to validate endpoint, file and process...

redsun-bluehammer-undefend-detection-pack

RedSun, BlueHammer, UnDefend, and CrossFamily Detection Pack IMPORTANT: All code and detection logic in this repository is AI-generated. There is no guarantee that these scripts are correct, complete, safe, or suitable for any environment. Use these scripts entirely at your own risk. The reposito...

CVE-2021-45232-RCE

CVE-2021-45232-RCE CVE-2021-45232-RCE - Multi-threaded batch vulnerability detection FOFA Query title="Apache APISIX Dashboard" Affected Scope Apache APISIX Dashboard 2.10.1 POC: IP:PORT/apisix/admin/migrate/export If this helps, please give the author a star before you leave, thank you! Batch...

class_struggle

Lucha de Clases Repositorio que acompaña al artículo "Class Struggle". El repositorio demuestra el uso de un autoencoder para detectar dominios similares a un subconjunto conocido de dominios de phishing publicados por CERT Polska. Fuentes de Datos Lista de Advertencia de CERT Polska Este proyect...

Detecting_blue_hammer_vuln

Detectingbluehammervuln Threat hunting query for bluehammer CVE windows CVE-2026-33825...

http-oracle-ebs-cve-2025-61882.nse

http-oracle-ebs-cve-2025-61882.nse Detects Oracle E-Business Suite CVE-2025-61882. Detection: multi-tier checks — fingerprinting, version checks, endpoint & SSRF tests, timing analysis & controlled exploitation 4 high-confidence results. Default = safe fingerprinting only. Set aggressive=true 2...

LeakGauge

LeakGauge This is the code repository for our paper: The Model's Tell: Measuring Context-Leakage Attack Signals with Behavior Gauges. ArXiv version and paper link: https://arxiv.org/abs/2608.17829 This repository implements the LeakGauge pipeline for leakage detection: demo dataset preparation,...

actions-secrets

SecureStack Secrets Analysis GitHub Action A GitHub Action that analyses your source code for secrets, credentials, API keys, server and database hostnames/URLS, and a lot more! When you add this to GitHub Actions we will analyze your source code to make sure there is no sensitive data in your...

printnightmare-detection-lab

PrintNightmare Threat Detection & Incident Response Lab CVE-2021-34527 📌 Overview This project documents an end-to-end security monitoring, detection engineering, and incident response implementation targeting PrintNightmare CVE-2021-34527. PrintNightmare is a critical vulnerability in the Window...

Rail-OT-Protector

⚠️ Repository Archived This repository has been archived and is no longer maintained. All development continues in the unified ICS OT Protector monorepo: https://github.com/spinfosecurity/ics-ot-protector Where to find this scanner Former repo| New location ---|--- Energy-Grid-Protector|...

Bypass_AV

This is a Trojan sample that can bypass the vast majority of antivirus software and sandboxes Below, I will explain the technologies involved in the Trojan, focusing on both the shellcode and the loader. Loader Section 1. Anti-sandbox As everyone knows, the conventional anti-sandbox detection is...

die-python

DetectItEasy-Python Native Python 3.11+ bindings for @horsicq's Detect-It-Easy Install From PIP The easiest and recommended installation is through pip. pip install die-python Using Git git clone https://github.com/elastic/die-python cd die-python Install Qt into the build. It can be easily...

log4j-recognizer

log4j-recognizer A utility to look for log4j in the currently running JVM CVE-2021-44228 Log4Shell. This is useful for systems that allow plugins to introduce their own jars. Therefore, you can find if someone brought log4j in a dangerous version. Usage Just instantiate Log4jRecognizer with your...

ufuzz

UFuzz, o Universal Plug and Fuzz, è uno strumento automatico di fuzzing UPnP. Enumera tutti gli endpoint UPnP sulla rete, individua i servizi disponibili e li sottopone a fuzzing. Ha anche la capacità di eseguire il fuzzing su HTTP utilizzando i log del proxy Burp. È progettato per eseguire il...