Deep-Reaver

Deep Reaver Deep Reaver es un potente kit de evaluación de vulnerabilidades y explotación mejorado con IA, construido en Python. Inspirado en herramientas como Nmap y Nessus, Deep Reaver está diseñado para un escaneo modular y profundo de aplicaciones web y servicios. Características Análisis...

pown

Pown Pown.js es un kit de pruebas de seguridad y explotación construido sobre Node.js y NPM. A diferencia de las herramientas de seguridad tradicionales, notablemente Metasploit, Pown.js considera que los frameworks son un antipatrón. Por lo tanto, cada funcionalidad en Pown es en realidad un...

p0wnedShell

p0wnedShell PowerShell Runspace Post Exploitation Toolkit Author: Cn33liz and Skons Version: 2.6 License: BSD 3-Clause What is it: p0wnedShell is an offensive PowerShell host application written in C that does not rely on powershell.exe but runs powershell commands and functions within a powershe...

SenselessViolence

SenselessViolence CVE-2022-31814 pfSense pfBlockerNG = 2.1.426 Toolkit di sfruttamento. Cosa? Questo è un toolkit di sfruttamento per la vulnerabilità di iniezione di comandi remoti nei plugin pfSense pfBlockerNG = 2.1.426, scoperta da IHTeam. L'ho scritto per giocare con alcuni dei principi di...

CVE-2024-27348

🔥 Toolkit di sfruttamento CVE-2024-27348 🎓 Progetto Accademico 📚 Corso: FC411 - Progettazione di Reti Sicure 👨‍🏫 Docente: Dr. Maira Sultan 🏫 Università: University of Prince Mugrin 📅 Anno: 2025 ⚡ Un toolkit completo per sfruttare CVE-2024-27348 Apache Huge-Graph-Server sviluppato come parte dei...

CiscoIOSSNMPToolkit

CiscoIOSSNMPToolkit Cisco iOS SNMP Overflow Exploit Toolkit CVE-2017-6736 CVE-2018-0296? Ich habe kürzlich CVE-2018-0296 als Submodul hinzugefügt, das in Verbindung mit diesem ursprünglichen Exploit verwendet werden kann, um Aufklärung zu betreiben und zu sehen, was in dem Gerät enthalten ist,...

PoC-CVE-2017-0199

PoC-CVE-2017-0199 Toolkit di exploit per la vulnerabilità RCE di Microsoft RTF. Informazioni su questa vulnerabilità: https://errorcybernews.com/2017/04/11/microsoft-word-zero-day/...

cve-2025-59287

CVE-2025-59287 - WSUS-Exploitation-Toolkit von adel-h4x0a ⚠️ Nur für Bildungs- und autorisierte Testzwecke ⚠️ Überblick Dieses Toolkit demonstriert die Ausnutzung von CVE-2025-59287, einer Remotecodeausführung-Schwachstelle in Windows Server Update Services WSUS. Komponenten 1...

Furtex

Furtex Post-Exploitation- und Evasion-Forschungstoolkit für Linux, basierend auf iouring und eBPF. Kein liburing, keine Frameworks, durchgängig raw syscalls. Weitere Tools folgen bald. PRs sind willkommen. 🇧🇷 Tritt Rootkit Researchers bei https://discord.gg/66N5ZQppU7 Nur für autorisierte Forschun...

Bashark

Bashark 2.0 Kit di post-sfruttamento Bashark aiuta i penetration tester e i ricercatori di sicurezza durante la fase di post-sfruttamento di un audit di sicurezza. Utilizzo Per avviare questo strumento su un host compromesso, basta eseguire il sourcing dello script bashark.sh dal terminale: $...

CVE-2025-55182-NextJS-Scanner-React2Shell-PoC

Strumento di Exploitation CVE-2025-55182 Uno strumento completo di ricerca sulla sicurezza per testare la vulnerabilità di Remote Code Execution nei React Server Components di Next.js CVE-2025-55182. Panoramica Questo toolkit fornisce capacità automatizzate di rilevamento ed exploitation per...

New Linux PamDOORa Backdoor Uses PAM Modules to Steal SSH Credentials

Cybersecurity researchers have disclosed details of a new Linux backdoor named PamDOORa that's being advertised on the Rehub Russian cybercrime forum for $1,600 by a threat actor called "darkworm." The backdoor is designed as a Pluggable Authentication Module PAM-based post-exploitation toolkit...

Exploit for CVE-2024-11114

Chromium Exploit Development Toolkit A toolkit for weaponizing...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE Exploitation Arsenal Professional penetration testing too...

Exploit for CVE-2026-22812

CVE-2026-22812 CVE-20...

Acacium-PostEx-Toolkit

Acacium Automated Post-Exploitation & Lateral Movement Toolkit...

Pega Platform 8.1.0 - Remote Code Execution Vulnerability

Exploit Title: Pega Platform 8.1.0 - Remote Code Execution RCE Exploit Author: Marcin Wolak using MOGWAI LABS JMX Exploitation Toolkit Vendor Homepage: www.pega.com Software Link: Not Available Version: 8.1.0 on-premise and higher, up to 8.3.7 Tested on: Red Hat Enterprise 7 CVE : CVE-2022-24082...

Pega Platform 8.1.0 - Remote Code Execution (RCE)

Exploit Title: Pega Platform 8.1.0 - Remote Code Execution RCE Google Dork: N/A Date: 20 Oct 2022 Exploit Author: Marcin Wolak using MOGWAI LABS JMX Exploitation Toolkit Vendor Homepage: www.pega.com Software Link: Not Available Version: 8.1.0 on-premise and higher, up to 8.3.7 Tested on: Red Hat...

Pega Platform 8.7.3 Remote Code Execution Vulnerability

Pega Platform versions 8.1.0 through 8.7.3 suffer from a remote code execution vulnerability. If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to uplo...

Pega Platform 8.7.3 Remote Code Execution

Exploit Title: Pega Platform 8.1.0 and higher Remote Code Execution Google Dork: N/A Date: 20 Oct 2022 Exploit Author: Marcin Wolak using MOGWAI LABS JMX Exploitation Toolkit Vendor Homepage: www.pega.com Software Link: Not Available Version: 8.1.0 on-premise and higher, up to 8.7.3 Tested on: Re...