CVE-2024-9474

Palo Alto PAN-OS Exploit PoC - CVE-2024-0012 & CVE-2024-9474 This script is a Proof of Concept PoC exploit for vulnerabilities found in Palo Alto PAN-OS CVE-2024-0012 & CVE-2024-9474. The script can be used to either scan a list of URLs for the vulnerability or exploit a single vulnerable URL...

Venom-JWT

Venom-JWT Penetration Tool - JWT Vulnerability and Secret Cracking Service Penetration Testing Solemn Statement: The techniques, ideas, and tools mentioned in this document are for learning and communication purposes only for security. No one shall use them for illegal purposes or for profit,...

GO-CVE-2011-4862

CVE-2011-4862 GO Exploit for CVE-2011-4862 Cross Compile with: GOOS=linux GOARCH=arm go build main.go...

Security Bulletin: Due to use of Golang Go, multiple vulnerabilities affect IBM Cloud Pak System

Summary Due to use of Golang Go multiple vulnerabilities affect IBM Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2026-39827 DESCRIPTION: An authenticated SSH client that repeatedly opened channels which were rejected by the server...

CVE-2022-0847

CVE-2022-0847 The Dirty Pipe Vulnerability For educational purposes only ┌──vagrant㉿kali- └─$ ls -al /etc/passwd -rw-r--r-- 1 root root 3124 Mar 8 08:47 /etc/passwd ┌──vagrant㉿kali- └─$ head -n 1 /etc/passwd root:x:0:0:root:/root:/usr/bin/zsh ┌──vagrant㉿kali- └─$ echo foo /etc/passwd zsh:...

subjs

subjs subjs obtiene archivos javascript de una lista de URL o subdominios. Analizar archivos javascript puede ayudarte a encontrar endpoints no documentados, secretos y más. Se recomienda combinarlo con gau y luego con https://github.com/GerbenJavado/LinkFinder Recursos Uso Instalación Uso:...

TheCl0n3r

TheCl0n3r TheCl0n3r te permitirá descargar y gestionar tus repositorios git. Prefacio Alrededor del 90% de las herramientas de pruebas de penetración que he utilizado en mi experiencia se encuentran principalmente en github. El objetivo de esto era facilitar la descarga, actualización y eliminaci...

smb

SMB A Go package for communicating over SMB. Currently only minimal funcationality exists for client-side functions. Here is a sample client that establishes a session with a server: package main import "log" "github.com/stacktitan/smb/smb" func main host := "172.16.248.192" options := smb.Option...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

sploit

sploit Sploit es un paquete de Go que ayuda en el análisis binario y la explotación. El factor motivador detrás del desarrollo de sploit es poder tener una API bien diseñada con funcionalidad que rivalice con algunos de los frameworks de desarrollo de exploits en Python más comunes, mientras se...

DirDar

DirDar v1.0 Descripción 🏴‍☠️ eludir directorios prohibidos - encontrar e identificar listado de directorios - también puedes usarlo como un brute-forcer de directorios Compatibilidad Esta herramienta es compatible con todo tipo de sistemas operativos siempre que tengas instalado el compilador GO...

go-scan-spring

go-scan-spring Vulnerability scanner to find Spring4Shell CVE-2022-22965 vulnerabilities For more information: https://www.fracturelabs.com/posts/effective-spring4shell-scanning-exploitation/ Build /opt $ git clone https://github.com/fracturelabs/go-scan-spring.git /opt $ cd go-scan-spring Usage...

cve-2009-3555-test-server

What is this? This is a TLS server using a vendored fork of the Go TLS stack that has renegotation indication extension forcibly disabled, which will trigger CVE-2009-3555 mitigations in OpenSSL 3.0+. Note that it isn't truly vulnerable to CVE-2009-3555 because the Go TLS stack doesn't allow...

go-dork

go-dork The fastest dork scanner written in Go. There are also various search engines supported by go-dork, including Google, Shodan, Bing, Duck, Yahoo and Ask. Install Usage Basic Usage Flags Querying Defining engine Pagination Adding custom headers Using proxy Chained with other tools Supportin...

go-dork

go-dork El escáner dork más rápido escrito en Go. También hay varios motores de búsqueda compatibles con go-dork, incluyendo Google, Shodan, Bing, Duck, Yahoo y Ask. Instalación Uso Uso básico Banderas Consultas Definir motor Paginación Agregar encabezados personalizados Usar proxy Encadenado con...

meteor

Meteor A cross-platform C2/teamserver supporting multiple transport protocols, written in Go. Note: This is in development and as such is not exactly stable. Documentation is also lacking, but will be improved gradually over time. General The Meteor system is split into several parts: Core : the...

lazyrecon

| | | |/ | /| | | | / / |/ | \ | | | / / | | | | | | / | | | ||\ |/ \ || ||/|| |v2 |/ Lazyrecon v2 is a subdomain discovery tool that finds and resolves valid subdomains then performs SSRF/LFI/SQLi fuzzing, brute-force and port scanning. It has a simple modular architecture and is optimized...

cowitness

CoWitness CoWitness is a tool designed to function as an HTTP, HTTPS, and DNS server. It allows you to serve web pages, log HTTP requests, and customize DNS responses. This README provides an overview of the features and instructions on how to compile and use the CoWitness tool. Features HTTP...

navgix

navgix navgix es una herramienta en golang multihebra que verificará vulnerabilidades de alias traversal en nginx Técnicas Actualmente, navgix soporta 2 técnicas para encontrar directorios vulnerables o alias de ubicación. Estas son las siguientes: Heurística navgix realizará una solicitud GET...

rayder

Rayder Una herramienta ligera para orquestar y organizar tus flujos de trabajo en línea de comandos Acerca de • Instalación • Uso • Configuración del flujo de trabajo • Ejecución paralela • Flujos de trabajo Acerca de Rayder es una herramienta de línea de comandos diseñada para simplificar la...