CVE-2020-5902

CVE-2020-5902 POC code for checking for this vulnerability. Since the code has been released, I decided to release this one as well. Patch Immediately! Usage: python3 CVE-2020-5902.py -u https://big-ip.com -o check 2/dev/null...

MHDDoS

MHDDoS DDoS Testing Toolkit · 57 Methods · Python 3 For authorized testing and educational use only. Do not attack systems, websites, or networks without the owner's explicit permission. Download · Features · Installation · Docker · Documentation · Community · Hosting ⚠️ Important Notice !CAUTION...

Inspector

Privilege Escalation unix helper SUMMARY Inspector is a python script for help in privilege escalation, for linux environement. After starting, this script search the kernel version and check if is exploit exists, load file history bash,zsh,mysql... and load list of programs loaded with root user...

msiscan

MSI Analyzer This Python script for Linux can analyze Microsoft Windows .msi Installer files and point out potential vulnerabilites. It was developed by Michael Baer @derbaer0 in the SEC Consult Vulnerability Lab. Currently, it is mostly suited for a local privilege escalation also described in o...

FuzzAP

FuzzAP A python script for obfuscating wireless networks ''' Warning: I am not a programmer by trade, nor would I consider myself one The common SSID list was pulled from https://wigle.net/gps/gps/Stat The OUI vendor list was parsed from http://standards.ieee.org/develop/regauth/oui/oui.txt for...

WFH

Windows Feature Hunter WFH Windows Feature Hunter WFH is a proof of concept python script that uses Frida, a dynamic instrumentation toolkit, to assist in potentially identifying common “vulnerabilities” or “features” within Windows executables. WFH currently has the capability to automatically...

web-traffic-generator

web-traffic-generator A quick and dirty HTTP/S "organic" traffic generator. About Just a simple poorly written Python script that aimlessly "browses" the internet by starting at pre-defined ROOTURLS and randomly "clicking" links on pages until the pre-defined MAXDEPTH is met. I created this as a...

cc.py

cc.py Extracting URLs of a specific target based on the results of "commoncrawl.org". Updated to v.0.3 | Whats new: 65% faster proceeding Specify a year via -y/--year, e.g.: -y 2018 Specify an output file via -o/--out, e.g.: -o whatever.txt Crawl all pages for a specific index -i/--index, e.g.:...

grafana-bruteforce

grafana-bruteforce A tool that takes a combo username and password list and will attempt to bruteforce grafana login page. Grafana will lock you out after 5 attempts so you need to ensure your proxy has multiple external ip's. How to Run Use supplied combo list python3 grafana-brute.py -u...

OSINT-Search

OSINT-Search Description Script in Python that applies OSINT techniques by searching public data using email addresses, phone numbers, domains, IP addresses or URLs. Create an account at https://pipl.com/api and get the API key. Create an account at https://www.opencnam.com/ and get the Account S...

bucket-brute

bucket-brute Aws S3 Tko Tool usage: bucket-brute.py -h -u URL -p PROXY -b BUCKET optional arguments: -h, --help show this help message and exit -u URL, --url URL No Such Bucket URL -p PROXY, --proxy PROXY Proxy for debugging -b BUCKET, --bucket BUCKET Bucket Name Example Creating mytest in region...

CVE-2025-24813-PoC

CVE-2025-24813-PoC Apache Tomcat Remote Code Execution Vulnerability Batch Detection Script CVE-2025-24813 Disclaimer: The vulnerability and its reproduction steps described in this document are for cybersecurity research and educational purposes only. No one shall use the information provided in...

Steghide-Brute-Force-Tool

Steghide Brute Force Tool Execute a brute force attack with Steghide to file with hide information and password established. How it work Cloning this repo to your computer and typing in your terminal: git clone https://github.com/Va5c0/Steghide-Brute-Force-Tool.git To launch the script by typing:...

CVE-2022-22947_exp

CVE-2022-22947-exp CVE-2022-22947 Exploit script Use python3 CVE-2022-22947.py Example: python3 CVE-2022-22947.py http://127.0.0.1:8080 "cat /etc/passwd"...

ADEL

ADEL - Android Data Extractor Lite This Python script dumps all important SQLite Databases from a connected Android smartphone to the local disk and analyzes these files in a forensically accurate workflow. If no smartphone is connected you can specify a local directory which contains the databas...

smtp_userenum

smtpuserenum Help: python3 smtpuserenum.py -h Usage: python3 smtpuserenum.py You can change the username list:...

PasteZort

PasteZort Pastejacking - PasteZort Uso: ./PasteZort.py...

HashTag

Name: HashTag: Parse and Identify Password Hashes Version: 0.41 Date: 11/05/2013 Author: Smeege Contact: [email protected] Description: HashTag.py is a python script written to parse and identify password hashes. It has three main arguments which consist of identifying a single hash type -sh...

CVE-2021-39165

CVE-2021-39165 This Python script allows to exploit CVE-2021-39165 in Cachet prior to and including 2.3.18 automatically. References : https://github.com/fiveai/Cachet/security/advisories/GHSA-79mg-4w23-4fqc https://nvd.nist.gov/vuln/detail/CVE-2021-39165...

FakeDataGen

FakeDataGen is a Full Valid Fake Data Generator. This tool helps you to create fake accounts in Spanish format with fully valid data. Within this information, you can find the most common names, emails, bank details and other useful information. Requirements Python 3 Install requirements.txt...