CVE-2025-31486-PoC

Disclaimer: The vulnerabilities described in this article and their reproduction steps are intended solely for cybersecurity research and educational purposes. No one may use the information provided herein for illegal purposes or unauthorized system testing. The author assumes no responsibility...

nexfil

NExfil is an OSINT tool written in python for finding profiles by username. The provided usernames are checked on over 350 websites within few seconds. The goal behind this tool was to get results quickly while maintaining low amounts of false positives. Available In Featured The Privacy, Securit...

automatic-api-attack-tool

Automatic API Attack Tool Imperva's customizable API attack tool takes an API specification as an input, and generates and runs attacks that are based on it as an output. The tool is able to parse an API specification and create fuzzing attack scenarios based on what is defined in the API...

squidmagic

Squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control C&C servers and Malicious site, using Squid proxy server and Spamhaus. Install dependencies pip install -r requirements.txt Usage python squidmagic.py /squid/access.log | | | | / |/ | | | | ...

JQShell

JQShell A weaponized version of CVE-2018-9206. Disclaimer Using this agianst servers you dont control, is illegal in most countries. The author claims no responsibility for the actions of those who use this software for illegal purposes. This software is intended for educational use only. No...

burp-alfresco-referer-proxy-cve-2014-9301

burp-alfresco-referer-proxy-cve-2014-9301...

cve-2023-37635

CVE-2023-37635 - Exploitation Guide Installation & Setup 1️⃣ Install Dependencies pip install -r requirements.txt 2️⃣ Run the Exploit With a proxy: python brutForc.py Without a proxy: python brutForc.py -n Notes: Replace with the target URL. The -n flag disables proxy usage. ⚠️ Disclaimer : This...

ByeDPIAndroid

ByeDPI for Android English | Русский Android application that runs a local VPN service to bypass DPI Deep Packet Inspection and censorship. This application runs a SOCKS5 proxy ByeDPI and redirects all traffic through it. Installation Or use Obtainium 1. Install Obtainium 2. Add the app by URL:...

sslsplit

SSLsplit - Interception transparente SSL/TLS https://www.roe.ch/SSLsplit Aperçu SSLsplit est un outil pour les attaques de type homme-du-milieu contre les connexions réseau chiffrées SSL/TLS. Il est conçu pour être utile en forensique réseau, analyse de sécurité d'applications et tests d'intrusio...

wpbf

wpbf! wpbf is a bruteforce tool to remotely test password strength, username enumeration and plugin detection on a WordPress site. Description ^^^^^^^^^^^ The script will try to login into the WordPress dashboard through the login form using a mixture of enumerated usernames, a wordlist and...

PoW-Shield

Description PoW Shield provides DDoS protection on OSI application layer by acting as a proxy that utilizes proof of work between the backend service and the end user. This project aims to provide an alternative to general anti-DDoS methods such as Google's ReCaptcha that has always been a pain t...

pipe-intercept

pipe-intercept Перехват взаимодействия Windows Named Pipes с помощью Burp или аналогичных HTTP-прокси-инструментов Именованные каналы Named Pipes очень популярны для межпроцессного взаимодействия в Windows. Они используются во многих приложениях, включая Windows Remote Procedure Call RPC. Цель...

fake-sms

Fake-SMS A simple command line tool using which you can skip phone number based SMS verification by using a temporary phone number that acts like a proxy. Latest update : The tool no longer uses upmasked.com, as the service went down. We are using another provider which provides more phone number...

pomerium

Pomerium — это обратный прокси-сервер с учётом идентичности и контекста. Pomerium обеспечивает безопасные подключения без клиента к внутренним веб-приложениям и другим сервисам без корпоративного VPN. Pomerium — это: Проще благодаря бесклиентскому доступу. Быстрее благодаря тому, что не требует...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Utilitaire de manipulation d'octets bruts, capable d'appliquer des transformations connues et moins connues, de faire des recherches binaires rapides, de l'interception de proxy réseau et plus encore. Installation sur Windows: Téléchargez...

CompMgmtLauncher_DLL_UACBypass

CompMgmtLauncher & Sharepoint: перехват порядка поиска DLL, обход UAC/постоянство через OneDrive CompMgmtLauncher.exe подвержен уязвимости перехвата порядка поиска DLL. Бинарный файл выполняет поиск в пользовательском окружении для DLL-файлов Secur32.dll или Wininet.dll, когда установлен OneDrive...

CVE-2021-3019

CVE-2021-3019 LanProxy Directory Traversal Lanproxy is an intranet penetration tool that proxies LAN personal computers and servers to the public network. It supports tcp traffic forwarding and supports any tcp upper layer protocol access to intranet websites, local payment interface debugging, s...

[SECURITY] [DLA 4826-1] puma security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4826-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA October 07, 2026 https://wiki.debian.org/LTS -...

frp

frp README | 中文文档 Sponsors frp est un projet open source dont le développement continu est rendu possible entièrement grâce au soutien de nos formidables sponsors. Si vous souhaitez les rejoindre, veuillez envisager de sponsoriser le développement de frp. Gold Sponsors L'IDE complet conçu pour le...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...