Cartero

Cartero URL http://section9labs.github.io/Cartero/ Description A robust Phishing Framework with a full featured CLI interface. The project was born out necessity through of years of engagements with tools that just didn't do the job. Even though there are many projects out there, we were not able...

TrashEmail

tl;dr TrashEmail es un bot alojado de Telegram que puede proteger tu dirección de correo electrónico personal ofreciendo direcciones de correo desechables. Puede crear, gestionar direcciones de correo desechables y vincularlas con tu chat del bot de Telegram. ¿Dónde está el bot? - @trashemailbot...

CVE-2026-77770

CVE-2026-77770 miniOrange 2FA CVE POC miniOrange 2FA WordPress plugin miniorange-2-factor-authentication ≤ 6.3.0 — unauthenticated arbitrary WordPress option deletion via the email-verification link userID / Txid / accessToken. For authorized testing only. Do not run this against systems you do n...

CVE-2018-8718

Exploit Title : Jenkins mailer plugin CSRF Vulnerability - Send CSRF MAIL Date : 2018/06/05 Exploit Author : Yeom Geun Cheol Vendor Homepage : https://jenkins.io/ Software Link : https://updates.jenkins.io/download/plugins/mailer/1.20/mailer.hpi Version: Below Version 1.20 1.1 1.20 Tested on :...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

CVE-2024-30998

PHPGurukul Men Salon Management System 2.0 Welcome to the PHPGurukul Men Salon Management System 2.0 repository. This project aims to provide a robust system for Men Salon Management. Security Vulnerabilities CVE-2024-30998 Description: Vulnerable to SQL Injection via 'email' parameter. Affected...

WP-CVE-2016-10033

WordPress = 4.6 Remote Command Execution Vulnerability PHPMailer CVE-2016-10033 Vulnerability Information WordPress is a blogging platform developed using the PHP language. Users can set up their own websites on servers supporting PHP and MySQL databases. It can also be used as a Content Manageme...

CVE-2020-14066

Icewarp Email Server 12.3.0.1 insecurepermissions https://nvd.nist.gov/vuln/detail/CVE-2020-14066...

CVE-2021-3754

CVE-2021-3754 Este repositorio documenta los detalles de vulnerabilidad y el exploit para CVE-2021-3754 descubierto y reportado por mí mismo el 21 de agosto de 2021 Métricas CWE-20: Validación de entrada incorrecta CVSS: 5.3 MEDIUM Descripción Se encontró una falla en Apache Keycloak y Redhat SSO...

evil-winrar

eval-winrar evil-winrar,cve-2023-38831 vulnerability exploitation and social engineering attack framework evil-winrar, csv-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework Introduction evil-winrar is a winrar csv-2023-38831 vulnerability exploitation and social...

vthunting

VT Hunting VThunting is now featured on VirusTotal. Virus Total Hunting is a tiny tool based on the VT api version 3 to run daily, weekly or monthly report about malware hunting. The report can be send via email, Slack channel or Telegram. The tool can also be used in cli to get a report anytime...

CVE-2025-30349

Horde IMP vulnerability – obfuscation via HTML encoding – XSS payload Horde 5.2.23; IMP 6.2.27 The details of the vulnerability are explained in Details.md file. The PoC creates and send an email with payload exploiting the vulnerability to the recipient. This kind of email has to be viewed in a...

Samurai

Samurai Email Discovery SED is a email discovery framework created 100% in BASH that grabs emails via google dork, company name, or domain name. Requirements apt-install lynx Possibly more features such as an OSINT options, and credential reuse discovery & torsocks implimented - but it does the...

CVE

CVE Writeups for CVE-2025-67586, CVE-2025-67985, CVE-2025-67986 root@kitploit: -------------- CVE-2025-67586 Exploit PoC -------------- Exploit Title: WordPress Plugin 5.2.0 - Broken Access Control Software Link: https://wordpress.org/plugins/highlight-and-share/ Version: Description A broken...

CVE-2024-42009

CVE-2024-42009 PoC: Listener de Captura de Correo Electrónico y Exploit XSS Descripción general Esta Prueba de Concepto PoC demuestra un exploit para CVE-2024-42009, aprovechando una vulnerabilidad de cross-site scripting XSS para extraer correos electrónicos de una aplicación de webmail objetivo...

detections

Detecciones Este repositorio sirve como hogar para el contenido de detección desarrollado por el equipo de delivr.to. Todas las reglas presentes en este repositorio tienen payloads correspondientes enlazados en las referencias y mostrados a continuación que pueden utilizarse para probar el...

detections

Detections This repo serves as a home for detection content developed by the delivr.to team. All rules present in this repo have corresponding payloads linked in references and shown below that can be used to test detection content. The repo currently holds the following types of detections:...

CVE-2024-21413

CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 python3 CVE-2024-21413.py -u [email protected] -p password -d [email protected] -s mail.example.com -i -u sender email address -p sender password -d...

CVE-2020-14065

Icewarp Email Server 12.3.0.1 unlimitedfileupload https://nvd.nist.gov/vuln/detail/CVE-2020-14065...

AmzWord

AmzWord an automated attack chain based on CVE-2022-30190, 163 email backdoor, and image steganography Thanks to the following github repository, we referenced and modified part of the code to integrate and implement our work: gdog follina virtual-reality 中文README请看这里 Requirements gdog： Python 2....