CVE-2015-7501

Laboratorio per le vulnerabilità di deserializzazione Java Questo contenuto è relativo all'articolo scritto per la dodicesima edizione della rivista H2HC. Consulta l'articolo completo su: https://www.h2hc.com.br/revista/ Le slide e il video della presentazione saranno disponibili presto. Una...

Ghazi

Ghazi Ghazi é um Plugin do BurpSuite para testar vários Payloads como "XSS, SQLi, SSTI, SSRF, RCE e LFI" através de diferentes abas, onde cada aba substituirá todos os parâmetros GET ou POST com a aba selecionada na aba "Proxy" ou "Repeater" Aba XSS do Ghazi substituindo todos os parâmetros pelo...

waf-bypass

Strumento di Bypass WAF WAF Bypass Tool è uno strumento open source per analizzare la sicurezza di qualsiasi WAF per falsi positivi e falsi negativi utilizzando payload predefiniti e personalizzabili. Controlla il tuo WAF prima che lo faccia un attaccante. WAF Bypass Tool è sviluppato dal team...

drow

drow Description TL;DR drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables post-build. It takes unmodified ELF executables as input and exports a modified ELF contianing an embedded user-supplied payload that executes at runtime. Slightly more...

waf-checker

WAF Checker Este projeto ajuda você a verificar o quão bem seu Firewall de Aplicações Web WAF protege seu produto contra ataques web comuns. Pode ser executado como um Cloudflare Worker com uma interface web interativa integrada ou como uma ferramenta CLI Node.js autônoma. Funcionalidades Testes...

FTP Fetch, Linux Reboot

Fetch and execute an RISC-V 64-bit payload from an FTP server. A very small shellcode for rebooting the system using the reboot syscall. This payload is sometimes helpful for testing purposes. Requires CAPSYSBOOT privileges. Module Options This module requires Metasploit:...

web-vulnerability-scanner

Web Vulnerability Scanner This project is a simple Python too...

webguard-scanner

webguard-scanner COMPANY: CODETECH IT SOLUTIONS NAME: KA...

Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry

Cybersecurity researchers have disclosed details of what appears to be a new strain of Shai Hulud on the npm registry with slight modifications from the previous wave observed last month. The npm package that embeds the novel Shai Hulud strain is "@vietmoney/react-big-calendar," which was uploade...

📄 Django 5.1.13 SQL Injection

Django version 5.1.13 remote SQL injection vulnerability scanning script. ============================================================================================================================================= | Title : Django 5.1.13 SQL Injection Scanner | | Author : indoushka | | Tested o...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 - React2Shell ██████╗ ███████╗ █████╗ █...

unified_scanner-SQL-LFI.XSS.IDOR-etc.-

unifiedscanner-SQL-LFI.XSS.IDOR-etc.- Key Improvements in...

Snitch__Scan

PoC exploit for XSS Vulnerability Scanner. This tool is designed...

Exploit for Incorrect Authorization in Cacti

CVE-2022-46169 This exploit is a modified version from the ori...

📄 Blood Bank and Donor Management System 2.4 SQL Injection

Blood Bank and Donor Management System version 2.4 suffers from a remote SQL injection vulnerability. Exploit Title: Blood Bank & Donor Management System v2.4 - Union Based SQLi Manuel Exploit Date: 2025-04-07 Exploit Author: Mehmet Can Kadıoğlu a.k.a mao7un Vendor:...

Exploit for CVE-2025-29927

CVE-2025-29927 Checker 📌 Introduction This script checks for t...

Event Booking Calendar 4.0 Cross Site Scripting Vulnerability

Title: Event Booking Calendar-4.0 XSS-Reflected Author: nu11secur1ty Vendor: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/event-booking-calendar/sectionDemo Reference: https://portswigger.net/web-security/cross-site-scripting/reflected Description: The value of the index reque...

CVE-2021-41931

The Company's Recruitment Management System in id=2 of the parameter from viewvacancy app on-page appears to be vulnerable to SQL injection. The payloads 19424269' or '1309'='1309 and 39476597' or '2917'='2923 were each submitted in the id parameter. These two requests resulted in different...

ZIP File Raider - Burp Extension For ZIP File Payload Testing

ZIP File Raider is a Burp Suite extension for attacking web application with ZIP file upload functionality. You can easily inject Burp Scanner/Repeater payloads in ZIP content of the HTTP requests which is not feasible by default. This extension helps to automate the extraction and compression...

PyScan-Scanner - Vulnerability Scanner With Custom Payload

REQUIRE urllib2 BeautifulSoup requests START Change database information $bdd = new PDO'mysql:host=localhost;dbname=pyscan', 'user', 'password'; Update a Python gate panelurl = "http://localhost/pyscan/" gatescraper = "cmd/gate.php" gatescanner = "cmd/scan.php" gatevuln = "cmd/vuln.php" gatepaylo...