CVE-2025-29927-scanner

Next.js Version Vulnerability Scanner by nocomp Overview This Python script is a comprehensive tool for scanning multiple subdomains to detect Next.js versions and identify potential CVE-2025-29927 vulnerabilities. It provides a detailed analysis of web applications built with Next.js across...

Nosql-MongoDB-injection-username-password-enumeration

Nosql injection username and password enumeration script Using this script, we can enumerate Usernames and passwords of Nosqlmongodb injecion vulnerable web applications. Exploit Title: Nosql injection username/password enumeration. Author: Kalana Sankalpa Anon LK. Website:...

CVE-2021-26855

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. The original repo was deleted shortly after additional features user enumeration etc. were added. Please post a pull request, if you have the latest version. CVE-2021-26855 ssrf...

ADSearch

ADSearch A tool written for cobalt-strike's execute-assembly command that allows for more efficent querying of AD. Key Features List all Domain Admins Custom LDAP Search Connect to LDAPS Servers Output JSON data from AD instances Retrieve custom attributes from a generic query i.e. All computers...

puncia

PantheraP.uncia Official CLI utility for Subdomain Center & Exploit Observer Puncia is the official command-line client for two A.R.P. Syndicate intelligence APIs — point it at a domain, a brand, or a vulnerability ID and get structured JSON back in seconds, no browser required: 🕸️ Subdomain Cente...

BruteConda

If this Helped you, Maybe You Can Help me By Sponsoring Me, which Will Help me Create Better "Open-source Tools" BruteConda A Directory Bruteforcing Tool That Makes Your Life Easier! Why Only BruteConda? Fast And Efficent Easy To Use User Friendly Requirements: Python3 Should Be Installed Followi...

Breacher

Breacher A script to find admin login pages and EAR vulnerabilites. Features Multi-threading on demand Big path list 482 paths Supports php, asp and html extensions Checks for potential EAR vulnerabilites Checks for robots.txt Support for custom patns Usages Check all paths with php extension...

ad-ldap-enum

ad-ldap-enum ad-ldap-enum is a Python script developed to collect users/computers and their group membership from Active Directory. In large Active Directory environments, tools such as NBTEnum were not quick enough. By executing LDAP queries against a domain controller, ad-ldap-enum is able to...

Certipy

Certipy - AD CS Attack & Enumeration Toolkit Certipy is a powerful offensive and defensive toolkit for enumerating and abusing Active Directory Certificate Services AD CS. It helps red teamers, penetration testers, and defenders assess AD CS misconfigurations - including full support for...

CVE-2023-36643

== Affected Software %hardbreaks Vendor: ITB-GmbH Affected Products: TradePro v9.5 Component: Function Customer; Action oordershow Confirmed: yes == Attack Vector %hardbreaks Type: Incorrect Access Control Access-Type: Remote Impact: Information Disclosure Incorrect Access Control in function...

CVE-2025-7775

CVE-2025-7775 Version detection PowerShell There's also a cool file hash based method: https://github.com/fox-it/citrix-netscaler-triage/blob/main/scan-citrix-netscaler-version.py You can also potentially use the client binaries to enumerate the version not sure if you need auth... not looked at...

subdomains.sh

subdomains.sh A wrapper around tools used for subdomain enumeration, to automate the workflow, on a given domain, written in bash. Resources The Workflow Installation Usage Credits Contribution The Workflow Installation Run the installation script: curl -s...

webstor

WebStor Fast Identification of Vulnerable Web Technologies in your Organization WebStor is a tool implemented in Python under the MIT license for quickly enumerating all websites across all of your organization's networks, storing their responses, and querying for known web technologies and...

haxunit

Intro • Installation • Usage • Running HaxUnit • Functions HaxUnit.com Join the Discord! 📘Intro HaxUnit is a Python-based comprehensive reconnaissance and security assessment tool for web domains. It integrates various tools for subdomain enumeration, port scanning, vulnerability scanning, and...

gOSINT

gOSINT Codacy Badge OSINT Swiss Army Knife in Go Take a look at the develop branch for more updates. Introduction gOSINT is a multiplatform OSINT Swiss army knife in Golang. If you want, feel free to contribute and/or leave a feedback! Like my project? Please consider donation : What gOSINT can d...

shellshock-cgi

shellshock-cgi A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server Usage $ python testing.py --server 172.16.255.130 --listen 172.16.255.1 Example Return: + Testing if 172.16.255.130 is vulnerable to CVE-2014-6271 via CGI + Listening for incoming connection...

linWinPwn

linWinPwn - Swiss-Army knife for Active Directory Pentesting using Linux Description linWinPwn is a bash script that wraps a number of Active Directory tools for enumeration LDAP, RPC, ADCS, MSSQL, Kerberos, SCCM, vulnerability checks noPac, ZeroLogon, MS17-010, MS14-068, object modifications...

omnisci3nt

⭐️ If you find this GitHub repo useful, please consider giving it a star! ⭐️ 🕵️‍♂️ Omnisci3nt: Unified Web Reconnaissance Toolkit Omnisci3nt is a comprehensive web reconnaissance and intelligence framework designed for cybersecurity professionals, ethical hackers, and security researchers. It...

reverse-ip-new-api

reverse-ip-new-api This tool is used to perform reverse IP lookups— searching for all domains hosted on one IP address. Features Multi-threading Processing API Based Processing Error Handling Customize Thread Count Buy Coffee : Bitcoin $: 14nXhmRiQx5joCXFTdR8ydm3T8et7MFDXC How To Run? 1. Download...

ksubdomain

KSubdomain: Ultra-Fast Stateless Subdomain Enumeration Tool 中文文档 | English KSubdomain is a stateless subdomain enumeration tool delivering unprecedented scanning speed with extremely low memory consumption. By directly operating network adapters via raw sockets — bypassing the OS kernel stack —...