MAL-005

MAL-005: Zip Slip in Add Carbon Applications in WSO2 ESB A ZIP file based directory traversal Zip Slip vulnerability was identified in the "Carbon Applications" add feature of WSO2 ESB. Remote code execution may be obtained by writing/overwriting specific files. Why no CVE? The vendor replied tha...

Cable

Cable Cable is a post-exploitation tool used for reconnaissance and Discretionary Access Control List DACL focused exploitation of an Active Directory environment. This tool was primarily created to learn more about .NET offensive development in an Active Directory context, while hoping to expand...

FDsploit

A File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool. FDsploit menu: $ python fdsploit.py -h | | \ | ||| | | | | | -| . | | . | | | || |/|| ||||| ||...ver. 1.2 Author: Christoforos Petrou game0ver ! usage: fdsploit.py -u | -f -h -p -d -e 0,1,2 -t -b -x -c -v --params...

nebulousAD

⚠️ A Note to NebulousAD Users As of April 14th, NuID will no longer be hosting the NebulousAD API that this code communicates with. As a small team of developers, we've found it isn't feasible to actively support, monitor, and develop both the NebulousAD portal as well as our Authentication...

h2buster

h2buster v0.4d Un escáner rápido, con hilos, recursivo, de fuerza bruta para directorios web sobre HTTP/2 usando hyper, inspirado en Gobuster. Características Rápido y portátil: instala hyper y ejecuta. Escaneo multiconxión. Conexiones multihilo. Escalable: los escaneos pueden ser tan dóciles o...

h2buster

h2buster v0.4d A fast, threaded, recursive, web directory brute-force scanner over HTTP/2 using hyper, inspired by Gobuster. Features Fast and portable - install hyper and run. Multiconnection scanning. Multithreaded connections. Scalable: scans can be as docile or aggressive as you configure the...

POC-CVE-2024-36877

This repository does not have a README...

CrawlBox

CrawlBox | Easy way to brute-force web directory. Operating Systems Tested MacOSX Kali Linux Ubuntu 16.04 Usage python crawlbox.py -h -v -w WORDLIST url positional arguments: url specific target url, like domain.com optional arguments: -h, --help show this help message and exit -v, --version show...

CrawlBox

CrawlBox | Forma sencilla de realizar fuerza bruta en directorios web. Sistemas Operativos Probados MacOSX Kali Linux Ubuntu 16.04 Uso python crawlbox.py -h -v -w WORDLIST url argumentos posicionales: url url objetivo específica, como domain.com argumentos opcionales: -h, --help muestra este...

pathprober

pathprober Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once. Purpose Brute-forcing website directories or HTTP pathname and validate using HTTP response code is not relevant anymore. This tool will help you to perform a penetration...

columbus-server

Columbus server This repository is deprecated! ‼️ The server component is moved to https://github.com/elmasy-com/columbus. Columbus Project is an API first subdomain discovery service, blazingly fast subdomain enumeration service with advanced features. Subdomain Lookup Columbus returned 638...

DarthSidious

Darth Sidious The goal is simple To share my modest knowledge about hacking Windows systems. This is commonly refered to as red team exercises. This book however, is also very concerned with the blue team; the defenders. That is, helping those who are working as defenders, analysts and security...

SharpHound3

THIS IS NOW DEPRECATED IN FAVOR OF SHARPHOUND. DATA COLLECTED USING THIS METHOD WILL NOT WORK WITH BLOODHOUND 4.1+ SharpHound - C Rewrite of the BloodHound Ingestor Get SharpHound The latest build of SharpHound will always be in the BloodHound repository here Compile Instructions SharpHound is...

Azure-AccessPermissions

Azure-AccessPermissions Easy to use PowerShell script to enumerate access permissions in an Azure Active Directory environment. Background details can be found in the accompanied blog posts: Untangling Azure Active Directory Principals & Access Permissions Untangling Azure Active Directory...

badsuccessor

BadSuccessor.py A penetration testing tool that exploits the dMSA delegated Managed Service Account privilege escalation vulnerability in Windows Server 2025 Active Directory environments. ⚠️ Legal Disclaimer This tool is for authorized penetration testing and security research purposes only. Use...

dcshadow

!WARNING DO NOT RUN IN PRODUCTION. This is meant for lab testing, for blue teams to work on identifying IoCs, event types, and behavior. Also, this tool is provided as-is. No support is planned apart from standard review on pull requests you may want to create. Don't run this from a Windows host...

Zimbra Collaboration Server 7.2.2/8.0.2 Local File Inclusion

A directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. dot dot in the skin parameter. This can be leveraged to execute arbitrary code by obtaining LDAP...

Eclipse Jetty ConcatServlet - Information Disclosure

Eclipse Jetty through 9.4.40, through 10.0.2, and through 11.0.2 is susceptible to information disclosure. Requests to the ConcatServlet with a doubly encoded path can access protected resources within the WEB-INF directory, thus enabling an attacker to potentially obtain sensitive information,...

cgit < 1.2.1 - Directory Traversal

cGit 1.2.1 via cgitcloneobjects has a directory traversal vulnerability when enable-http-clone=1 is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request. id: CVE-2018-14912 info: name: cgit 1.2.1 - Directory Traversal author: 0xAkoko severity: high description: cGit...

CVE-2021-21424

CVE-2021-21424 Directory Traversal and file exposure • CVE-2021-21424 • Description: WebProfiler exposes internal server paths if it is not disabled in production. • Affected versions: Symfony 2.8 to 5.x. • Typical bypass: direct access to /appdev.php/profiler/. Summary of CVE-2021-21424 • CVE:...