web-scanner

🌐 Web Scanner Tool 🌐 Developed by tmrswrr Version 1.0.0 A comprehensive tool for Web Domain Scanning including Subdomain Discovery, Directory Enumeration, Network Scanning, and Website Identification. 📷 Screenshots 📷 👇 💫 How to Use 💫 👇 📒 Read Me 📒 The Advanced Web Scanner is a versatile...

CVE-2026-97348

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to and including 1.74.3 . The flaw exists in the get_instance_css function, where the [siteorigin_widget] shortcode handler directly calls $the_widget->widget() on attacker-supplied decod...

CVE-2026-97348 SiteOrigin Widgets Bundle <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read via LESS Injection via [siteorigin_widget] Shortcode 'value' JSON Instance (design.colors LESS Variable)

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the getinstancecss function. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary file...

EUVD-2026-96222

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the getinstancecss function. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary file...

GrafanaDirectoryScanner

PoC لـ CVE-2021-43798 Grafana هي منصة مفتوحة المصدر للمراقبة وقابلية الملاحظة. إصدارات Grafana من 8.0.0-beta1 حتى 8.3.0 باستثناء الإصدارات المصححة معرضة لثغرة اجتياز الدليل directory traversal، مما يتيح الوصول إلى الملفات المحلية. عنوان URL المعرض هو: /public/plugins//، حيث يكون معرّف المكوّن...

urlbuster

██╗ ██╗██████╗ ██╗ ██████╗ ██╗ ██╗███████╗████████╗███████╗██████╗ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║██╔════╝╚══██╔══╝██╔════╝██╔══██╗ ██║ ██║██████╔╝██║ ██████╔╝██║ ██║███████╗ ██║ █████╗ ██████╔╝ ██║ ██║██╔══██╗██║ ██╔══██╗██║ ██║╚════██║ ██║ ██╔══╝ ██╔══██╗ ╚██████╔╝██║...

SilentHound

SilentHound Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc. Created by Nick Swink from Layer 8 Security. Installation Using pipenv recommended method python3 -m pip install --user pipenv git clone https://github.com/layer8secure/SilentHound.git cd...

CVE-2026-104763

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'filepath' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...

CVE-2026-103520

The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom text attribute user-defined field name' parameter in all versions up to, and including, 1.7.31 due to insufficient input sanitization and output...

PSPKIAudit

PSPKIAudit PowerShell toolkit for auditing Active Directory Certificate Services AD CS. It is built on top of PKISolution's PSPKI toolkit Microsoft Public License. This repo contains a newer version of PSPKI than what's available in the PSGallery see the PSPKI directory. Vadims Podans the creator...

caOptics

Note Projet archivé en raison de l'évolution des priorités de développement et du recentrage de mes efforts communautaires vers d'autres domaines PoC, autres outils et démos/présentations, le projet est passé en lecture seule. CA Optics - Analyseur d'écarts d'accès conditionnel Azure AD Qu'est-ce...

httpdoom

HttpDoom - HTTP Attack surface analyser Validate large HTTP-based attack surfaces in a very fast and reliable way. Inspired by Aquatone. Installing You must have dotnet SDK at version 6+: $ dotnet pack -c Release -o nupkg $ dotnet tool install --global --add-source .\nupkg\ httpdoom.console...

yolobox

██╗ ██╗ ██████╗ ██╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ╚██╗ ██╔╝██╔═══██╗██║ ██╔═══██╗██╔══██╗██╔═══██╗╚██╗██╔╝ ╚████╔╝ ██║ ██║██║ ██║ ██║██████╔╝██║ ██║ ╚███╔╝ ╚██╔╝ ██║ ██║██║ ██║ ██║██╔══██╗██║ ██║ ██╔██╗ ██║ ╚██████╔╝███████╗╚██████╔╝██████╔╝╚██████╔╝██╔╝ ██╗ ╚═╝ ╚═════╝ ╚══════╝ ╚═════╝ ╚═════╝...

Exploits_and_Advisories

الاستغلالات والنشرات الأمنية مستودع يتتبّع الاستغلالات والثغرات والنشرات الأمنية العامة التي اكتشفتها أو شاركت في اكتشافها أو ألّفتها أو شاركت في تأليفها. CVEs CVE| ID| Target| Description| Disclosure ---|---|---|---|--- CVE-2020-10881| ZDI-20-333| TP-Link Archer A7/C7| تجاوز سعة مكدس DNS| Pwn2Ow...

adfsbrute

adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...

the-backdoor-factory

The new version of BACKDOOR FACTORY is available! Get access here: https://github.com/sponsors/secretsquirrel WARNING: Pull Requests WILL BE IGNORED AND CLOSED. The Backdoor Factory BDF For security professionals and researchers only. The goal of BDF is to patch executable binaries with user...

cve-2019-0227

cve-2019-0227 ثغرة تنفيذ التعليمات البرمجية عن بُعد في Apache Axis 1.4 تحتاج إلى إعداد مستمع على جهازك المحلي باستخدام msf، كما تحتاج إلى تعديل الأسطر من 24 إلى 30 من الكود ＃تحتاج إلى تغيير هذه المتغيرات لتتناسب مع تكوينك myip = “ 192.168.0.117 ” ＃عنوان IP لجهازك target = “ 192.168.0.102 ” ＃عنوان...

BOF_Collection

BOFCollection Divers BOFs pour Cobalt Strike Requirements beacon.h Pour les instructions de compilation et la vue d'ensemble des BOF : help-bof ActiveDirectory GetDomainInfo.c Retourne des informations sur le domaine actuel et le contrôleur de domaine. inline-execute GetDomainInfo.o Collection...

ResetNightmare

ResetNightmare Outil de preuve de concept POC pour ResetNightmare CVE-2026-27912. ResetNightmare est une faille de validation dans le protocole Kerberos Change Password qui permet de réinitialiser le mot de passe de n'importe quel compte utilisateur/ordinateur cible, sans connaître le mot de pass...

GroupPolicyBackdoor

GroupPolicyBackdoor GroupPolicyBackdoor est un utilitaire Python pour la manipulation et l'exploitation des objets de stratégie de groupe GPO. Les vecteurs d'attaque liés aux GPO peuvent très souvent mener à des scénarios d'élévation de privilèges à fort impact dans les environnements Active...