19773 matches found
CVE-2018-6574
CVE-2018-6574 CVE-2018-6574 go get...
AlphaGolang
AlphaGolang 作者：Juan Andres Guerrero-Saade JAG-S @ SentinelLabs 描述： AlphaGolang 是一组 IDAPython 脚本，旨在帮助恶意软件逆向工程师掌握 Go 二进制文件。其理念是将脚本拆分为具体的步骤，从而避免脆弱的单体脚本，并模拟分析人员在处理 Go 二进制文件时可能遵循的方法。 脚本根据 GPL 许可发布（感谢 Tim Strazzere 的原始 GolangLoaderAssist，我们对其进行了重构并更新为 Python3，向 Tim 致敬 :）。欢迎并鼓励贡献！ 要求：IDA Pro（理想版本 v7.6+）...
cve-2017-7921-golang
Hikvision bypass exploit Requirements 1. github.com/levigross/grequests 2. github.com/msterzhang/gpool 3. golang.org/x/net 4. github.com/go-vgo/robotgo Build git clone https://github.com/MisakaMikato/cve-2017-7921-golang.git cd cve-2017-7921-golang/src/cve-2017-7921-golang go build . Usage...
tko-subs
tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...
dnssearch
dnssearch 这是一个子域名枚举工具。 目的 dnssearch 接受一个输入域名（-domain 参数）和一个字典文件（-wordlist 参数），然后它会并发执行 DNS 请求，将字典文件的每一行作为子域名，最终暴力破解顶级域名下的所有子域名。 它支持自定义文件扩展名（-ext，默认为 php）和其他可选参数： Usage of ./dnssearch: -consumers int Number of concurrent consumers. default 8 -domain string Base domain to start enumeration from...
sploit
sploit Sploit 是一个Go语言包，用于辅助二进制分析和漏洞利用。开发sploit的初衷在于提供一个设计良好的API，其功能足以媲美一些常见的Python漏洞利用开发框架，同时充分利用Go编程语言的优势。出色的交叉编译支持、goroutines、强大的密码学库以及静态类型，只是选择Go的几个原因。 本项目受pwntools和其他优秀项目的启发。目前仍处于开发初期。预计本项目将重点关注shellcode编写、二进制补丁、ROP栈构建以及通用二进制分析。 针对CTF挑战的解法 package main; import sp "github.com/zznop/sploit" var...
CVE-2026-46333
CVE-2026-46333 Research and educational repository for CVE-2026-46333 , focused on reproducible analysis and a safe test PoC workflow. 1 CVE-2026-46333 This project documents the vulnerability behavior, test setup, and validation approach so researchers and defenders can reproduce findings...
CVE-2022-0492-Container-Escape
CVE-2022-0492-Container-Escape CVE-2022-0492-Container-Escape Implemented in Go Reference links: https://github.com/chenaotian/CVE-2022-0492 https://blog.trailofbits.com/2019/07/19/understanding-docker-container-escapes/...
CVE-2026-22557-Path-Traversal-Ubiquti-UniFi
CVE-2026-22557 Path Traversal Ubiquti UniFi Network Application This repository contains a Go-based proof-of-concept scanner for CVE-2026-22557 targeting the UniFi Network Application. The tool performs a controlled and non-destructive scan against a set of common endpoints and traversal payloads...
CVE-2023-4966
CVE-2023-4966 CitrixBleed Programm to exploit Citrix Applications with a range of ip adresses here is how you compile it for windows, macOS, or Linux GOOS=windows GOARCH=amd64 go build -o citrix citrix.go GOOS=darwin GOARCH=amd64 go build -o citrix.exe citrix.go GOOS=linux GOARCH=amd64 go build -...
CVE-2023-25157-checker
CVE-2023-25157-checker A script, written in golang. POC for CVE-2023-25157 Steps to use 1. git clone https://github.com/7imbitz/CVE-2023-25157-checker.git 2. cd CVE-2023-25157-checker 3. go run CVE-2023-25157.go Replace with the URL of the target server. Google Dork...
xalgorix
Xalgorix — Pentester de IA de código abierto que demuestra vulnerabilidades La mayoría de los escáneres detectan. Xalgorix demuestra. Un agente LLM autónomo aplica una metodología completa de pentesting, y luego un verificador independiente reexplotа cada hallazgo antes de que se reporte — así...
cve-2023-36845-scanner
Escáner de Vulnerabilidades para Juniper CVE-2023-36845 Este escáner de vulnerabilidades se puede utilizar para escanear firewalls Juniper y determinar si son vulnerables a CVE-2023-36845. Debido a que está construido sobre go-exploit, este escáner tiene dos fases: Verificación del objetivo para...
CVE-2025-32433-Remote-Shell
CVE-2025-32433 Remote Shell Go-based exploit for CVE-2025-32433 returning a remote bash shell. Heavily inspired by understanding of exploit derived from ProDefense's PoC for CVE-2025-32433. Running the Exploit make exploit.exe is also made available for Windows machines by the cross-compilation...
CVE-2018-6574
CVE-2018-6574 Remote command execution in Golang go get command. CVE-2018-6574 this vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system by installing a malicious library, this vulnerability was fixed in Go 1.8.7, 1.9.4 and 1.10rc2. Golang will bui...
CVE-2026-84304
A flaw was found in gRPC-Go. This vulnerability allows an unauthenticated remote attacker to exhaust process memory by sending millions of fragmented HTTP/2 DATA frames. Each fragmented frame is stored as a separate message, consuming disproportionate heap memory. This can lead to a runtime panic...
go-get-RCE
go-get-RCE This is the exploit of CVE-2018-6574: go get RCE This vulnerability impacts Golang go get command and allows an attacker to gain code execution on a system installing their malicious library. This is a good example of a vulnerability that can be exploited using typosquatting to gain co...
cve-2023-25194
Apache Druid CVE-2023-25194 CVE-2023-25194 es una vulnerabilidad de deserialización que afecta a Apache Kafka. Este go-exploit demuestra la explotación de CVE-2023-25194 contra Apache Druid usando Kafka. Este tipo de ataque normalmente requiere una infraestructura de atacante LDAP JNDI que...
cve-2023-25194
Apache Druid CVE-2023-25194 CVE-2023-25194 is a deserialization vulnerability affecting Apache Kafka. This go-exploit demonstrates exploiting CVE-2023-25194 against Apache Druid using Kafka. This type of attack typically requires an LDAP JNDI attacker infrastructure that is normally spread across...