143 matches found
Text4ShellPayloads
Text4ShellPayloads Dieses Projekt enthält ein Python-Skript, das bösartige Befehle unter Ausnutzung der Sicherheitslücke CVE-2022-42889 generiert. Der anfällige Server wurde gemäß der Anleitung von "Karthik U J" eingerichtet, indem der Schritt unter...
cve-2019-0604-SP2010-netv3.5
cve-2019-0604-SP2010-netv3.5 Kürzlich bin ich auf eine SharePoint 2010 SP2 gestoßen und alle Proofs of Concept, die ich getestet habe, funktionierten nicht, bis ich erkannte, dass der Server auf .net 3.5 lief, was eine andere Bibliothek erfordert. Hier ist die .dll für .net 3.5. Der Code stammt v...
SpringPeace
SpringPeace SpringPeace ist eine GUI/CLI unter GPL-3.0-or-later zur Erstellung von Payload-Kandidaten aus Android boot.img für CVE-2026-43499. Die Windows-App prüft ADB, liest boot.img, erstellt payload.so-Kandidaten und testet sie über ADB in Manifest-Reihenfolge. SpringPeace ist eine GUI/CLI...
Anti-Virus-Evading-Payloads
🚩 Anti-Virus-Evading-Payloads !CAUTION Durante la fase di exploitation di un penetration test o di un engagement di ethical hacking, dovrai in ultima analisi cercare di far eseguire codice sui computer dei sistemi target. Che avvenga tramite email di phishing, consegna di un payload attraverso un...
api_wordlist
apiwordlist Une wordlist de noms d'API utilisée pour le fuzzing des API d'applications web. Contenu apiseeninwild.txt - Contient des noms de fonctions d'API que j'ai rencontrés dans la nature. actions.txt - Tous les verbes de noms de fonctions d'API objects.txt - Tous les noms substantifs de noms...
sqlicat
sqlicat Framework de SQL Injection em Python puro stdlib...
AI-for-fastjson-1.2.83-RCE-skill
fastjson-1.2.83-RCEskill AI agent skill for detecting and exp...
Exploit for Code Injection in Exiftool_Project Exiftool
CVE-2021-22204 - ExifTool Arbitrary Code Execution An upgrade...
📄 HTTP/2 Multi-Server HPACK Exhaustion
This code implements a multi-target HTTP/2 resource exhaustion framework designed to stress or overwhelm server implementations through protocol-level amplification techniques. It includes server-specific payload generation for multiple platforms, automated connection orchestration, stream scalin...
Data Agents under Attack: Vulnerabilities in LLM-Driven Analytical Systems
Data agents integrate LLM-driven reasoning with relational data access, executable analytical tools, and multi-step workflow orchestration, making them increasingly central to enterprise analytics. This integration introduces new security vulnerabilities across data resources, database execution,...
Exploit for CVE-2025-66478
CVE-2025-66478-Research-Proof-of-Concept Overview This re...
The Infinite Mutation Engine? Measuring Polymorphism in LLM-Generated Offensive Code
Malware authors have traditionally relied on polymorphic techniques to produce variants in the same malware family, complicating signature-based detection. Integrating generative AI into offensive toolchains enables attackers to synthesize structurally diverse payloads with identical behavior,...
Exploit for Deserialization of Untrusted Data in Facebook React
markdown Summary CVE-2025-55182 Scanner is a high-perfor...
lightweight-msf
Lightweight-MSF !License: MIThttps://img.shields.io/badge...
linux-security-tools
Linux Security Tools Linux security tools, scanners, crackers...
📄 Jinja 2 1.4.0 Tactical RMM SSTI Detection
This proof of concept script detects potential server-side template injection vulnerabilities in web applications using template engines such as Jinja. The script sends a dynamically generated mathematical expression within a template payload to a target URL parameter. If the server evaluates the...
flask_ssti_exploit
Tools for Exploiting SSTI Vulnerabilities under Flask Di...
metasploit-mcp
metasploit-mcp Metasploit Framework MCP server for exploit ex...