CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto File Write Exploit This exploit search over Global Protect URLS instances & try to write-file using CVE-2024-3400 Use with Caution Made with educational Purpouses only Usage: chmod +x gp-exploit.sh ./gp-exploit.sh filenametowrite urls.txt Shodan Search & Url'...

fscan

Fscan English Комплексный инструмент сканирования внутренней сети, автоматизированное сканирование уязвимостей в один клик. Версия : 2.2.2 Возможности Возможности сканирования Обнаружение хостов - ICMP/Ping-зондирование, поддержка подсчёта живых хостов в больших подсетях класса B/C Сканирование...

redpill

:octocat: Description du projet Le projet redpill vise à assister les shells reverse TCP dans les tâches de post-exploitation. Souvent, lors de missions redteam, nous devons utiliser des moyens non conventionnels pour accéder au système cible, comme les shells reverse TCP pas metasploit afin de...

extractTVpasswords

Extract password from TeamViewer memory using Frida CVE-2018-14333 Hi there, in this article we want to tell about our little research about password security in TeamViewer. The method can help during the pentest time for post exploitation to get access to another machine using TeamViewer...

vger

V'ger V'ger is an interactive command-line application for post-exploitation of authenticated Jupyter instances with a focus on AI/ML security operations. User Stories As a Red Teamer , you've found Jupyter credentials, but don't know what you can do with them. V'ger is organized in a format that...

Check-CVE-2021-23383

Check-CVE-2021-23383 Check the conditions for exploiting CVE-2021-23383 through the handlebars library version assessment...

Strutscli

StrutsExp Usage strutsexp http://example.com/index.action...

SharpShares

SharpShares Multithreaded C .NET Assembly to enumerate accessible network shares in a domain Built upon djhohnstein's SharpShares project .\SharpShares.exe help Usage: SharpShares.exe /threads:50 /ldap:servers /ou:"OU=Special Servers,DC=example,DC=local" /filter:SYSVOL,NETLOGON,IPC$,PRINT$ /verbo...

F5-Big-IP-CVE-2020-5902-mass-exploiter

F5-Big-IP-CVE-2020-5902-mass-exploiter F5 Big-IP CVE-2020-5902 mass exploiter/fuzzer. usage: CVE-2020-5902-mass-exploiter.py -l list.txt -w workers...

terraMaster-CVE-2022-24990

terraMaster-CVE-2022-24990 Tool Introduction A rapid exploitation tool for CVE-2022-24990. Novice code. Feel free to raise issues if you have any problems. Usage main -u http://127.0.0.1:8181 -t pocexp poc Only detect information disclosure vulnerabilities. exp Attempt to upload WebShell...

SIGRed

CVE-2020-1350 AKA SIGRed v0.30 Summary: A Zeek package for detection of attempts to exploit Microsoft Windows DNS server via CVE-2020-1350 AKA SIGRed - CVE Score of 10.0 References:...

JShell

JShell JShell - Get a JavaScript shell with XSS. Usages Run shell.py and JShell will automatically try to detect your IP address, default LPORT is 33. As you can see the payload has been generated and now all you have to do is to deliver this payload to the victim. As soon as you do that, you wil...

pown

Pown Pown.js est un kit d'outils de test de sécurité et d'exploitation construit sur Node.js et NPM. Contrairement aux outils de sécurité traditionnels, notamment Metasploits, Pown.js considère les frameworks comme un anti-modèle. Par conséquent, chaque fonctionnalité de Pown est en fait un modul...

beef

Copyright c 2006-2026 Wade Alcorn - [email protected] Cadre d'exploitation de navigateur BeEF - https://beefproject.com Voir le fichier 'doc/COPYING' pour la permission de copie =============================================================================== Qu'est-ce que BeEF ? BeEF est...

cve-2020-1472

CVE-2020-1472 POC Replicate this vulnerability in a Windows domain environment using proxychains proxy on macOS. Environment DC Primary Domain Controller: Domain User Domain Member Host: Set up a SOCKS5 forward proxy directly via gost. Attack Hacker Attacker Machine: Configure proxychains4 vim...

CVE-2025-55182-NextJS-Scanner-React2Shell-PoC

CVE-2025-55182 Exploitation Tool A comprehensive security research tool for testing Next.js React Server Components Remote Code Execution vulnerability CVE-2025-55182. Overview This toolkit provides automated detection and exploitation capabilities for CVE-2025-55182, a critical RCE vulnerability...

Mass-Assigner

Mass Assigner Mass Assigner is a powerful tool designed to identify and exploit mass assignment vulnerabilities in web applications. It achieves this by first retrieving data from a specified request, such as fetching user profile data. Then, it systematically attempts to apply each parameter...

heappy

🙂 Heappy : un éditeur de tas convivial Heappy est un éditeur basé sur gdb/gef qui vous aide à gérer le tas pendant le développement de vos exploits. Le projet doit être considéré comme un outil didactique utile pour comprendre l'évolution du tas au cours du cycle de vie du processus. Il a été cré...

aclpwn.py

aclpwn.py Aclpwn.py est un outil qui interagit avec BloodHound pour identifier et exploiter les chemins d'escalade de privilèges basés sur les ACL. Il prend un point de départ et un point d'arrivée et utilise les algorithmes de recherche de chemin de Neo4j pour trouver le chemin d'escalade de...

rpef

Фреймворк пост-эксплуатации роутеров В настоящее время фреймворк включает несколько модулей для образов прошивок: 'Verified' - Этот модуль подтверждён как рабочий и стабильный. 'Unverified' - Считается, что этот модуль работает или должен заработать с небольшими дополнительными усилиями, но ожида...