Ghazi

Ghazi Ghazi è un Plugin per BurpSuite per testare vari Payload come "XSS, SQLi, SSTI, SSRF, RCE e LFI" attraverso diverse schede, dove ogni scheda sostituirà ogni parametro GET o POST con la scheda selezionata nella scheda "Proxy" o "Repeater" Scheda XSS di Ghazi che sostituisce ogni parametro co...

waf-bypass

Strumento di Bypass WAF WAF Bypass Tool è uno strumento open source per analizzare la sicurezza di qualsiasi WAF per falsi positivi e falsi negativi utilizzando payload predefiniti e personalizzabili. Controlla il tuo WAF prima che lo faccia un attaccante. WAF Bypass Tool è sviluppato dal team...

drow

drow Description TL;DR drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables post-build. It takes unmodified ELF executables as input and exports a modified ELF contianing an embedded user-supplied payload that executes at runtime. Slightly more...

CVE-2015-7501

Laboratorio per le vulnerabilità di deserializzazione Java Questo contenuto è relativo all'articolo scritto per la dodicesima edizione della rivista H2HC. Consulta l'articolo completo su: https://www.h2hc.com.br/revista/ Le slide e il video della presentazione saranno disponibili presto. Una...

waf-checker

WAF Checker Questo progetto ti aiuta a verificare quanto bene il tuo Web Application Firewall WAF protegge il tuo prodotto contro i comuni attacchi web. Può essere eseguito come Cloudflare Worker con una Web UI interattiva integrata o come strumento CLI Node.js autonomo. 🧪 Copertura dei Test e...

FTP Fetch, Linux Reboot

Fetch and execute an RISC-V 64-bit payload from an FTP server. A very small shellcode for rebooting the system using the reboot syscall. This payload is sometimes helpful for testing purposes. Requires CAPSYSBOOT privileges. Module Options This module requires Metasploit:...

web-vulnerability-scanner

Web Vulnerability Scanner This project is a simple Python too...

webguard-scanner

webguard-scanner COMPANY: CODETECH IT SOLUTIONS NAME: KA...

Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry

Cybersecurity researchers have disclosed details of what appears to be a new strain of Shai Hulud on the npm registry with slight modifications from the previous wave observed last month. The npm package that embeds the novel Shai Hulud strain is "@vietmoney/react-big-calendar," which was uploade...

📄 Django 5.1.13 SQL Injection

Django version 5.1.13 remote SQL injection vulnerability scanning script. ============================================================================================================================================= | Title : Django 5.1.13 SQL Injection Scanner | | Author : indoushka | | Tested o...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 - React2Shell ██████╗ ███████╗ █████╗ █...

unified_scanner-SQL-LFI.XSS.IDOR-etc.-

unifiedscanner-SQL-LFI.XSS.IDOR-etc.- Key Improvements in...

Snitch__Scan

PoC exploit for XSS Vulnerability Scanner. This tool is designed...

Exploit for Incorrect Authorization in Cacti

CVE-2022-46169 This exploit is a modified version from the ori...

📄 Blood Bank and Donor Management System 2.4 SQL Injection

Blood Bank and Donor Management System version 2.4 suffers from a remote SQL injection vulnerability. Exploit Title: Blood Bank & Donor Management System v2.4 - Union Based SQLi Manuel Exploit Date: 2025-04-07 Exploit Author: Mehmet Can Kadıoğlu a.k.a mao7un Vendor:...

Exploit for CVE-2025-29927

CVE-2025-29927 Checker 📌 Introduction This script checks for t...

Event Booking Calendar 4.0 Cross Site Scripting Vulnerability

Title: Event Booking Calendar-4.0 XSS-Reflected Author: nu11secur1ty Vendor: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/event-booking-calendar/sectionDemo Reference: https://portswigger.net/web-security/cross-site-scripting/reflected Description: The value of the index reque...

CVE-2021-41931

The Company's Recruitment Management System in id=2 of the parameter from viewvacancy app on-page appears to be vulnerable to SQL injection. The payloads 19424269' or '1309'='1309 and 39476597' or '2917'='2923 were each submitted in the id parameter. These two requests resulted in different...

ZIP File Raider - Burp Extension For ZIP File Payload Testing

ZIP File Raider is a Burp Suite extension for attacking web application with ZIP file upload functionality. You can easily inject Burp Scanner/Repeater payloads in ZIP content of the HTTP requests which is not feasible by default. This extension helps to automate the extraction and compression...

PyScan-Scanner - Vulnerability Scanner With Custom Payload

REQUIRE urllib2 BeautifulSoup requests START Change database information $bdd = new PDO'mysql:host=localhost;dbname=pyscan', 'user', 'password'; Update a Python gate panelurl = "http://localhost/pyscan/" gatescraper = "cmd/gate.php" gatescanner = "cmd/scan.php" gatevuln = "cmd/vuln.php" gatepaylo...