CVE-2022-35914

CVE-2022-35914 Batch Detection Tool Create a target.txt file, import the URLs to be detected, and then start batch detection. If an error occurs, please disable the proxy...

cve-2021-3007-vulnerable

CVE-2021-3007 Vulnerable Test Environment Intentionally vulnerable test environment for validating CVE-2021-3007 detection in security scanners. Vulnerability Overview Attribute| Value ---|--- CVE ID| CVE-2021-3007 Severity| Critical CVSS 9.8 Type| Insecure Deserialization → RCE Affected| Laminas...

Multi-Stage-Exploitation-and-Detection-Engineering-Analysis-of-CVE-2023-34362-in-MOVEit-Transfer

CVE-2023-34362 MOVEit Transfer Vulnerability Analysis Project Overview This repository contains an academic technical analysis of CVE-2023-34362, a critical SQL injection vulnerability affecting MOVEit Transfer. The project was prepared for CYB625 – Ethical Hacking & Penetration Testing. Importan...

Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device

This repository documents how deployment of Microsoft Defender for Endpoint on a Windows 11 device, including onboarding via local script, enabling device discovery, configuring Log4j2 detection CVE-2021-44228, and validating incident response workflows. Key Features ✅ Local script onboarding for...

CVE-2023-3519-BackdoorCheck

cve-2023-3519-citrix-scanner This script is a basic Citrix Scanner for CVE-2023-3519. We try to identify vulnerable Citrix Gateways/ADCs by looking at the HTTP headers. How it works During our analysis of this vulnerability, we and our friends at CERT-Verbund noticed, that our patched systems had...

CVE-2021-22210

0x01 Preface Disclaimer: This project is for learning and communication purposes only. Do not use it for illegal unauthorized testing! Update Log 10.30 Added burp proxy pool Rewrote command-line arguments Added GitLab unauthorized batch and single detection functionality 0x02 Usage Instructions...

Detect-CVE-2021-21972

Detect CVE-2021-21972...

drupal-check

drupal-check This is a script for performing log diving in Cpanel Apache, and Default Apache configurations. It will look for signs of a potential compromise, not guarenteed evidence, just looking to make analysis easier for the investigator...

CVE-2023-23752

CVE-2023-23752 Introduction Open source, Go-based multi-concurrent batch POC detection, high accuracy. Testing 1k entries takes about 40 seconds, with over 90% accuracy. Usage Generate Linux executable set CGOENABLED=0 set GOOS=linux go build cve-2023-23752-PoC.go Generate Windows executable set...

OpenSSL-Vulnerability-Detection-Script

OpenSSL-Vulnerability-Detection-Script This is an OpenSSL Vulnerability Detection Script for CVE-2022-2274...

CVE-2019-15107-RCE-WebMin

Webmin CVE-2019-15107 Detection A lightweight Python script that fingerprints Webmin versions and flags any server running 1.882 ≤ version ≤ 1.920 as potentially vulnerable to CVE-2019-15107. This tool does not exploit the vulnerability—only reports it. Prerequisites Git Python 3.7+ Docker & Dock...

MaltegoHeartbleed

MaltegoHeartbleed Maltego transform to detect the OpenSSL Heartbleed vulnerability CVE-2014-0160 For more information read the write-up on my blog: http://disk0nn3ct.svbtle.com/maltego-openssl-heartbleed-transform...

CVE-2023-28432

CVE-2023-28432 CVE-2023-28432 MinIO Sensitive Information Leak Detection Script Usage go mod tidy go build main.go ./main -u 'http://example.com'...

keepass_CVE-2023-24055_yara_rule

keepassCVE-2023-24055yararule Contains a simple yara rule to hunt for possible compromised KeePass config files How-to Use a yara rule scanner, like yara, loki or thor-lite to scan systems with this rule. The default location for the local KeePass config file is...

ActiveMQ_RCE_Pro_Max

ActiveMQRCEGUI Enhanced version, short for Pro Max Version v1.0.3 Added version identification Added vulnerability version verification v1.0.2 Added proxy Removed Help button...

CVE-2021-44228

CVE-2021-44228 Professional Service scripts to aid in the identification of affected Java applications in TeamServer...

CVE-2020-19360

CVE-2020-19360 Fhem arbitrary file read poc FOFA search title=="Home, Sweet Home" Usage: python3 Fhem.py -h python3 Fhem.py -u http://www.example.com single URL test python3 Fhem.py -f url.txt batch detection Tip After the scan is complete, a vulnerable.txt file with vulnerabilities will be...

heartbleed

Patrik Karlsson have implemented ssl-heartbleed and commited into svn.nmap.org. you can get it from https://svn.nmap.org/nmap/scripts/ssl-heartbleed.nse. they have a discussion here: http://seclists.org/nmap-dev/2014/q2/22 . get more details from http://heartbleed.com Credit to author of ssltest....

mcp-stdio-shellguard

Part of theStudioMeyer MCP Stack — Built in Mallorca 🌴 · ⭐ if you use it mcp-stdio-shellguard Defense-in-depth bundle for MCP stdio servers. Wraps childprocess.exec/spawn with allowlist + sandbox + replay-detection, plus an AST audit CLI mcp-shellguard-audit that scans MCP server sources for...

aws-perimeter

aws-perimeter A terminal-based AWS Security Scanner with 100+ security checks across VPC, IAM, S3, CloudTrail, containers ECS/EKS, and AI attack detection. Detects dangerous IAM permissions, exposed secrets, misconfigured S3 buckets, container vulnerabilities, and emerging LLMjacking threats...