gitjacker

gitjacker Gitjacker 能够从误上传了 .git 目录的站点下载 git 仓库并提取其内容。即使禁用了目录列表，它仍能恢复仓库的很大一部分。 仅用于教育/渗透测试用途。 更多信息请访问 https://liam-galvin.co.uk/security/2020/09/26/leaking-git-repos-from-misconfigured-sites.html 安装 curl -s "https://raw.githubusercontent.com/liamg/gitjacker/master/scripts/install.sh" | bash ...或者下...

gitjacker

gitjacker Gitjacker downloads git repositories and extracts their contents from sites where the .git directory has been mistakenly uploaded. It will still manage to recover a significant portion of a repository even where directory listings are disabled. For educational/penetration testing use...

cve-2020-27955

cve-2020-27955 cve-2020-27955 Reproducción 1. Crear un repositorio en GitHub 2. git clone https://github.com/attacker/poc.git . 3. echo calc.exe git.cmd 4. git lfs track “.dat” 5. echo “Junk” large.dat 6. git add -A 7. git commit -m “POC” 8. git push -u origin master -f...

CVE-2024-32002-Exploit

!/bin/bash git init hook cd hook mkdir -p y/hooks cat y/hooks/post-checkout dotgit.txt git hash-object -w --stdin dot-git.hash printf "120000 %s 0\ta\n" "$cat dot-git.hash" index.info git update-index --index-info index.info git commit -m "add-symlink" git remote add origin...

CVE-2021-3572

CVE-2021-3572 This repository is designed for testing CVE-2021-3572 in pypa/pip. For more information, see these resources: CVE page: https://vulners.com/cve/CVE-2021-3572 PR where vulnerability was fixed: https://github.com/pypa/pip/pull/9827 Issue with more discussion:...

octohook

octohook Túnel de Web Hooks de Git para C2 Instalación apt-get update && apt-get upgrade -y apt-get install python3-pip git -y pip install --upgrade pip pip install virtualenv virtualenv -p python venv . venv/bin/activate git clone https://github.com/dsnezhkov/octohook pip install prompttoolkit...

wifi-password

wifi-password Quickly fetch your WiFi password and if needed, generate a QR code of your WiFi to allow phones to easily connect. Works on macOS and Linux , Windows Installation Install using pip $ python3 -m pip install --user wifi-password Install using git $ git clone...

cve-2024-10220-test

Repositorio de Pruebas para CVE-2024-10220 Este repositorio se utiliza para probar CVE-2024-10220 vulnerabilidad de volúmenes gitRepo de Kubernetes como parte de la investigación de seguridad HPC en la Universidad de Oklahoma Central. ADVERTENCIA: Este repositorio contiene un hook de Git malicios...

GitBackdorizer

GitBackdorizer BETA GitBackdorizer is a proof of concept, fully inspired in Ulisses Castro's 50 ton of backdoors talk, that abuses the lack of user attention to steal git access credentials. How it Works GitBackdorizer consists of three pieces: handler, dropper and the payload. Handler The handle...

gdb-frontend

GDBFrontend is an easy, flexible and extensionable gui debugger. Installing Requirements GDB = 8.2 with python3 python3 = 3.6 tmux PIP Package Python Wheel Recommended You can install GDBFrontend with pip. sudo python3 -m pip install gdbfrontend if it is already installed and you are upgrading su...

web_exploit_detector

Web Exploit Detector Introduction The Web Exploit Detector is a Node.js application and NPM module used to detect possible infections, malicious code and suspicious files in web hosting environments. This application is intended to be run on web servers hosting one or more websites. Running the...

golddigger

Gold Digger Search files for gold Gold Digger is a simple tool used to help quickly discover sensitive information in files recursively. Originally written to assist in rapidly searching files obtained during a penetration test. Installation Gold Digger requires Python3. virtualenv -p python3...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

CVE-2023-29007

CVE-2023-29007 Repositorio PoC para CVE-2023-29007 Más información disponible en: https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007 https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/...

CVE-2026-102906

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks 功能已完整。我不会在 Gitleaks 中合并新功能。未来版本仅包含安全补丁。我的工作重点已转向 Betterleaks license: https://raw.githubusercontent.com/gitleaks/gitleaks/master/LICENSE badge-license: https://img.shields.io/github/license/gitleaks/gitleaks.svg go-docs-badge:...

CVE-2017-1000117

Test repository to check Git's vulnerability CVE-2017-1000117 ¿Cómo funciona? Clona este repositorio de forma recursiva. La frase 「うんこもりもり」que significa algo como "Un montón de mierda" se mostrará en tu terminal. $ git clone --recursive https://github.com/greymd/CVE-2017-1000117.git Cloning into...

TheCl0n3r

TheCl0n3r TheCl0n3r will allow you to download and manage your git repositories. Preface About 90% of the penetration testing tools used in my experience can be found primarily on github. The aim of this was to make it easier to download, update and delete these git repositories. If moving to a n...

CVE-2026-102906

The 0xshariq github-mcp-server is vulnerable to an OS command injection in the Git Remove MCP Tool component. The flaw exists within the child_process.exec function of the src/github.ts file, where manipulation of the File argument allows for remote code execution. The exploit is publicly availab...

EUVD-2026-89579

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function childprocess.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The...