qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: ▶ cat urls.txt https://example.com/path?one=1&two=2 https://example.com/path?two=2&one=1...

miteru

This repository does not have a README...

lazyrecon

| | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and is optimized...

mimipenguin

MimiPenguin 2.0 A tool to dump the login password from the current linux desktop user. Adapted from the idea behind the popular Windows tool mimikatz. This was assigned CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781. Fun fact it's still not fixed after GNOME Keyring 3.27.2 and still works ...

cve-2021-4034-mock

CVE-2021-4034 PwnKit Mock Vulnerability System This project is a mock system that reproduces the core operating principles of CVE-2021-4034 Out-of-Bounds Read/Write vulnerability in the Linux pkexec daemon. Without actual SUID privilege escalation, it safely simulates the mechanism of environment...

CVE-2026-24061

CVE-2026-24061 Telnet RCE Exploit - By SafeBreach Labs This script exploits the CVE-2026-24061 vulnerability in Telnet servers using a malformed USER environment variable. Usage Run the script with a target host: python telnetrce.py -p Arguments host: Target IP address or hostname required -p,...

CVE-2021-44228-white-box

Article Journal: https://www.researchgate.net/publication/373214720PengujianKerentananpadaCVE-2021-44228terhadapAncamanRemoteAccessTrojan Thesis: https://1drv.ms/b/s!Al-8jtgY0iBXmz79DKEROaZT5n8a?e=1E6Pkm Log4Shell // n. Log4j Vulnerability Environment Box This repo purposely built for Log4j...

DanderSpritz_lab

DanderSpritz Lab Purpose The goal of DanderSpritz lab is to allow researchers and defenders to quickly stand up a fully functional version of DanderSpritz - The Equation Group's Post exploitation tool-set and a Windows Server 2008 Domain and client as targets. The Windows target have some reverse...

envy

Quick Start • Configuration • Commands • Keybindings • FAQ • Documentation A secure encrypted vault for managing API keys, secrets, and environment variables. Built for developers who live in the terminal. What is Envy? I built Envy because I was tired of juggling .env files and keeping secrets...

klar

Klar Integration of Clair and Docker Registry supports both Clair API v1 and v3 Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair https://github.com/coreos/clair. Klar is designed to be used as an integration tool so it...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

sheepl

sheepl Sheepl : Creating realistic user behaviour for supporting tradecraft development within lab environments Introduction There are lots of resources available online relating to how you can build AD network environments for the development of blue team and red team tradecraft. However the...

CVE-2014-6271

Shellshock Exploitation CVE-2014-6271 Shellshock is effectively a Remote Command Execution vulnerability in BASH. This script exploits the vulnerability in the web environment on apache or similar with modcgi enabled. The vulnerability lies in the manipulation of environment variables, which are...

cloudmapper

CloudMapper Note the Network Visualization functionality command prepare is no longer maintained. CloudMapper helps you analyze your Amazon Web Services AWS environments. The original purpose was to generate network diagrams and display them in your browser functionality no longer maintained. It...

CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

🤝 Show your support - give a ⭐️ if you liked the content | SHARE on Twitter | Follow me on CVE-2022-0337 System environment variables leak on Google Chrome, Microsoft Edge and Opera 📝 Description Successful exploitation of this vulnerability can lead to the leak of user's secrets stored inside a...

kubestriker

A Blazing fast Security Auditing tool for kubernetes!! Overview & Journey of Kubestriker Kubestriker is a platform-agnostic tool designed to tackle Kuberenetes cluster security issues due to misconfigurations and will help strengthen the overall IT infrastructure of any organisation. It performs...

CVE-2023-50164

CVE-2023-50164 A scanning utility and PoC for CVE-2023-50164 Considerations CVE-2023-50164's exploitation is very environment specific. This PoC attempts to generalize the exploitation process by requiring the user to enter environment specific details through the script flags. The script attempt...

Damn-Vulnerable-GraphQL-Application

Damn Vulnerable GraphQL Application Damn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security. Table of Contents About DVGA Operation Modes Scenarios Prerequisites Installation Installation - Docker...

CVE-2026-20262

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

wacker

Overview A set of scripts to help perform an online dictionary attack against a WPA3 access point. Wacker leverages the wpasupplicant control interface to control the operations of the supplicant daemon and to get status information and event notifications ultimately helping speedup connection...