Vanquish

Vanquish – Get to Shell Vanquish is a Kali Linux based Enumeration Orchestrator built in Python. Vanquish leverages the opensource enumeration tools on Kali to perform multiple active information gathering phases. The results of each phase are fed into the next phase to identify vulnerabilities...

harpyTools

Active Directory Post-Exploitation and Relay Automation Utilities This repository contains a collection of Python orchestrator scripts designed for security assessments and penetration testing within Active Directory environments. These tools are specifically engineered for post-exploitation...

CVE-2021-24006-Fortimanager-Exploit

CVE-2021-24006 – FortiManager Improper Access Control Exploit PoC PoC Proof of Concept - Educational Use Only Exploit for improper access to SD-WAN Orchestrator in FortiManager, exploiting access control flaw CWE-284. Description The CVE-2021-24006 vulnerability affects FortiManager versions 6.4....

CVE-2020-1313

CVE-2020-1313 Abstract Windows Update Orchestrator Service is a DCOM service used by other components to install windows updates that are already downloaded. USO was vulnerable to Elevation of Privileges any user to local system due to an improper authorization of the callers. The vulnerability...

CVE-2021-24006

CVE-2021-24006 – FortiManager Improper Access Control Exploit PoC PoC Proof of Concept - Educational Use Only Exploit for improper access to SD-WAN Orchestrator in FortiManager, exploiting an access control flaw CWE-284. Description The vulnerability CVE-2021-24006 affects FortiManager versions...

COMahawk

COMahawk Privilege Escalation: Weaponizing CVE-2019-1405 and CVE-2019-1322 Video Demo https://vimeo.com/373051209 Usage Compile or Download from Release https://github.com/apt69/COMahawk/releases 1. Run COMahawk.exe 2. ??? 3. Hopefully profit or 1. COMahawk.exe "custom command to run" ie...

Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download

The File Download API in Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to read arbitrary files via absolute path traversal in the SearchString JSON field in /home/download POST data. id: CVE-2021-38146 info: name: Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Downloa...

McAfee ePolicy Orchestrator <5.10.9 Update 9 - Cross-Site Scripting

McAfee ePolicy Orchestrator before 5.10.9 Update 9 is vulnerable to a cross-site scripting vulnerability that allows administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized. reference: -...

MassScanning-CVE-2025-55182

Непрерывный сканер VPS Легковесная система оркестрации и сканер-воркер для выполнения крупных/непрерывных сканирований по разделённым входным файлам. Этот репозиторий содержит скрипты оркестрации, образ воркера на основе Docker и вспомогательные скрипты для многократного запуска сканирований и...

CVE-2024-29855

CVE-2024-29855 Contournement d'authentification de Veeam Recovery Orchestrator CVE-2024-29855 par Sina Kheirkhah @SinSinology de SummoningTeam @SummoningTeam Analyse technique Une analyse de la cause racine de la vulnérabilité est disponible sur mon blog Résumé Veeam a publié un avis de sécurité...

purpleteam-orchestrator

purpleteam orchestrator Orchestrator component of purpleteam - Currently in alpha Clone this repository. cd to the repository root directory and run: npm install Configuration Copy the config/config.example.json to config/config.local.json. Use the config/config.js for documentation and further...

UsoDllLoader

UsoDllLoader ⚠️ 2020-06-06 Update: this trick no longer works on the latest builds of Windows 10 Insider Preview. This means that, although it still works on the mainstream version of Windows 10 , you should expect it to be patched in the coming months. Description This PoC shows a technique that...

Wipro Holmes Orchestrator 20.4.1 - Information Disclosure

Wipro Holmes Orchestrator 20.4.1 20.4.102112020 allows remote attackers to download arbitrary files, such as reports containing sensitive information, because authentication is not required for API access to processexecution/DownloadExcelFile/DomainCredentialReportExcel,...

Fortigate-SSL-VPN-Exploit-Kit

FortiGate SSL-VPN kit восстановлен в дикой природе Исследовательский архив. Восстановлен в том виде, в каком был найден. Я не писал эти файлы. Опубликовано: 1 сентября 2026 года Этот репозиторий — оркестратор, полезные нагрузки второй стадии и операторские слушатели , которые работают поверх...

AI-PASSWORD-TESTING-AGENT

AI Password Attack Orchestrator - Defensive Research Repository ⚠️ LEGAL DISCLAIMER & RESEARCH PURPOSE THIS REPOSITORY IS FOR DEFENSIVE CYBERSECURITY RESEARCH AND EDUCATIONAL PURPOSES ONLY NO EXPLOITABLE CODE - This repository contains only theoretical research, conceptual analysis, and defensive...

gitlab-profile

STATUT DU TEST : ↳ core-orchestrator tester ↳ documentation tester DATE DE CRÉATION: 2025-10-24 09:50 PM ↳ Alberto Marangelo - @theGlitched !WARNING ⚠️ Ce projet est en version bêta ! 🎉 Oui ! Nous sommes heureux d'annoncer que la version bêta sera bientôt terminée ! À partir de la version 0.153,...

HPESBNW05155 rev.2 - HPE Telco Service Orchestrator, Multiple Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Unauthorized Data Injection, memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator Prior to v5.7.1 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

CVE-2026-82370 Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service

Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service permits network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container management instructions. This could allow an attacker to alter Fibre Channel fabric switch...

PT-2026-97615

Name of the Vulnerable Software and Affected Versions Brocade SANnav versions prior to 3.0.1a Description Unauthenticated remote command injection in the orchestrator HTTP service allows network-adjacent attackers to execute arbitrary administrative switch CLI commands and issue container...

Vulnerability handling in VeloCloud Orchestrator (VCO) on-premises

VeloCloud has identified a vulnerability in VeloCloud Orchestrator VCO on-premises. This vulnerability allows external attackers to access privileged internal functions, which can compromise privacy, integrity, and availability. The vulnerability is actively exploited and has already been exploit...