302366 matches found
Bitmancer
Bitmancer Bitmancer is a library for Offensive Security Tooling development for the Windows operating system written in Nim. It aims to provide common APIs, routines, and macros with highly configurable, position-independent, standalone implementations. If you're looking to develop an Implant, te...
text4shell-tools
commons-text-tools Collegamenti rapidi Clicca per trovare: Trova i file .jar di commons-text e le loro versioni Chiamate alle funzioni vulnerabili di commons-text Patch immediata sui file .jar di commons-text per disabilitare i comportamenti vulnerabili Esempio di scansione e patch Panoramica...
CVE-2026-107321
The W3 Total Cache WordPress plugin, in versions prior to 2.10.6 , is vulnerable to a path traversal flaw during the media-import process. The plugin fails to confine file copies to the document root and lacks effective file-type restrictions. This allows users with Author privileges or higher to...
SockFuzzer
SockFuzzer: Framework di fuzzing per il kernel XNU Stato del progetto SockFuzzer, originariamente progettato come fuzzer incentrato sulla rete per il kernel XNU utilizzato in macOS e iOS, si è evoluto in un framework completo di fuzzing per il kernel. Pur mantenendo il nome originale come omaggio...
CVE-2018-1207-better
Exploit PoC para CVE-2018-1207: Dell iDRAC7/iDRAC8 RCE Reverse Shell Este repositorio contiene un script de prueba de concepto en Python para demostrar una vulnerabilidad de ejecución remota de código presente en dispositivos iDRAC7 e iDRAC8 con versiones de firmware 2.52.52.52 e inferiores. Este...
linux_injector
linuxinjector A simple ptrace-less shared library injector for x64 Linux. Usage linuxinjector mode 1. normal dlopen 2. memfd + dlopen for injecting into containers 3. raw shellcode pid Target process id. Must have ptrace rights to it required for accessing /proc/$pid/mem. Not ptraced, so another...
Venom
Venom Venom is a C++ library that is meant to give an alternative way to communicate, instead of creating a socket that could be traced back to the process, it creates a new "hidden" there is no window shown detached edge process edge was chosen because it is a browser that is installed on every...
WTSRM2
WTSRM2 This is a continuation to my original project WTSRM and the corresponding talk. This project was re-written in order to utilize C++17 in order to create a template that allows us to change the required functionality at compile time with ease! This is implemented as a header only file such...
OpenSSL-1_0_1g_CVE-2015-3197
OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson Todos los derechos reservados. DESCRIPCIÓN El Proyecto OpenSSL es un esfuerzo colaborativo para desarrollar un conjunto de herramientas robusto, de grado comercial, completo y de...
etl-parser
etl-parser Lettore di file di log Event Trace Log in puro Python etl-parser è una libreria di parsing pura Python 3 per file di log ETL di Windows. ETL è il formato predefinito per ETW così come il formato predefinito per il logger del kernel. etl-parser non ha dipendenze di sistema e funzionerà...
xll_windows_reverse_shell
xllwindowsreverseshell xll windows reverse shell In your Attacker Kali machine: git clone https://github.com/n3rdh4x0r/xllwindowsreverseshell.git 1. Update the revsh.ps1 2. create python http server python3 -m http.server 9999 In your Attacker Windows machine: 1. Move notpadXLL.c to your windows...
pwnkit
CVE-2021-4034 Introduction This is an exploit for the CVE-2021-4034 vulnerability, aka pwnkit, which was discovered by Qualys. Usage Compilation $ make or $ gcc -o pwnkit.so -fPIC -shared pwnkit.c -Wl,-e,main Testing $ make test or $ ./pwnkit.so...
CVE-2025-1302_jsonpath-plus_RCE
CVE-2025-1302 JSONPath-Plus RCE PoC PoC Script Name: poc.py A proof-of-concept exploit script for CVE-2025-1302, which targets an RCE vulnerability in the jsonpath-plus library. When run against a vulnerable service endpoint, the script attempts to trigger remote code execution via a JSONPath...
CVE-2018-8097
PoC de CVE-2018-8097 Este es un script de prueba de concepto simple en Python que demuestra el CVE-2018-8097, afectando a la librería PyEve para versiones 0.7.5 Uso usage: cve20188097.py -h -u URL -c COMMAND options: -h, --help show this help message and exit -u URL, --url URL Target URL where yo...
CVE-2024-28397-RCE
CVE-2024-28397 RCE Script Default reverse shell payload and optional command argument allowed exploit works for js2py = v0.74 Requirements Python 3.x requests library pip install requests Netcat listener for reverse shell Example usage Reverse shell: python exploit.py 10.129.227.108 /runcode...
Zerodapi
Documentación de Zerodai Empieza! pip install zerodai==0.0.0.20 export zerodapikey="TUAPIKEY" Obtén tu api key https://zerodai.com Chat Conversacional Simple - Sin memoria from zerodai import zerodai import os zerodai.apiauthos.getenv"zerodapikey" messages = while True: prompt = input" " if promp...
MemoryMapper
Memory Mapper Memory Mapper è una libreria leggera che permette di mappare in memoria sia assembly nativi che gestiti, utilizzando l'iniezione di processo in un processo specificato dall'utente o l'auto-iniezione; la tecnica di iniettare un assembly nel processo attualmente in esecuzione che tent...
CVE-2017-7494
SambaCry CVE-2017-7494 Exploit CVE-2017-7494/SambaCry allows authenticated users to upload a shared library to a writeable folder, and perform execution attack using the upload libraries. Vulnerability explanation SambaCry is a path-validation vulnerability in how Samba handles named-pipe request...
