1083 matches found
chepy
Chepy Chepy is a python library with a handy cli that is aimed to mirror some of the capabilities of CyberChef. A reasonable amount of effort was put behind Chepy to make it compatible to the various functionalities that CyberChef offers, all in a pure Pythonic manner. There are some key advantag...
hashdb
HashDB HashDB is a community-sourced library of hashing algorithms used in malware. How To Use HashDB HashDB can be used as a stand alone hashing library, but it also feeds the HashDB Lookup Service run by OALabs. This service allows analysts to reverse hashes and retrieve hashed API names and...
CVE-2024-23346-exploit
CVE-2024-23346-exploit This is a exploit for the known Remote Code Execution RCE vulnerability in the pymatgen CVE-2024-23346 Python library by uploading a malicious CIF file to the hosted CIF Analyzer website on the Chemistry machine from Hack the Box. NVD CVE LINK :...
CVE-2025-64512
CVE-2025-64512 — pdfminer.six Insecure Deserialization Pickle via Crafted PDF ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table o...
mcpshield
mcpshield A drop-in fix for the unpatched MCP STDIO command-injection flaw the CVE-2026-30623 family, disclosed by OX Security in April 2026 as "by design" -- no SDK patch is coming. Import one line, and every stdio MCP server your Python app launches gets its command/args/env validated before th...
cvedb
CVEdb CVEdb is yet another Python CVE database library and utility. There are lots already available. Why create another? Most existing libraries rely on a third party API like cve.circl.lu, which can and do throttle usage, require registration, and/or demand an internet connection. Some librarie...
CVE-2025-64512_PoC
CVE-2025-64512 — pdfminer.six RCE exploit Python 3, stdlib only no pip installs. For authorized security testing and CTF use only — you are responsible for complying with the law and your engagement's rules of engagement. | ---|--- CVE| CVE-2025-64512 Affected| pdfminer.six .pickle.gz inside its...
homoglyphs
THE PROJECT IS ARCHIVED Forks: https://github.com/orsinium/forks Homoglyphs Homoglyphs -- python library for getting homoglyphs and converting to ASCII. Features It's smarter version of confusablehomoglyphs: Autodect or manual choosing category aliases from ISO 15924. Auto or manual load only...
CVE-2024-28397-RCE
CVE-2024-28397 RCE Script Default reverse shell payload and optional command argument allowed exploit works for js2py = v0.74 Requirements Python 3.x requests library pip install requests Netcat listener for reverse shell Example usage Reverse shell: python exploit.py 10.129.227.108 /runcode...
regipy
regipy ⚠️ Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...
suds
OVERVIEW The "Suds" web services client is a lightweight soap-based client for python the is licensed under LGPL. For details, visit: Project site: https://fedorahosted.org/suds/ Documentation: https://fedorahosted.org/suds/wiki/Documentation Epydocs: http://jortel.fedorapeople.org/suds/doc/...
CVE-2026-27641-Flask-Reuploaded
CVE-2026-27641 is a critical security vulnerability affecting versions of the Flask-Reuploaded library. It allows remote attackers to achieve arbitrary file writes Versions affected: 1.5.0 To test the vulnerability: python3 -m venv flaskreuploadedvenv In flaskreuploadedvenv: pip install...
wxpath
wxpath - declarative web graph traversal with XPath NEW: TUI - Interactive terminal interface powered by Textual for testing wxpath expressions and exporting data. Install Requires Python 3.10+. pip install wxpath For TUI support: pip install "wxpathtui" Immediately launch the TUI via uv: uvx...
dotnetfile
dotnetfile dotnetfile is a Common Language Runtime CLR header parser library for Windows .NET files built in Python. The CLR header is present in every Windows .NET assembly beside the Portable Executable PE header. It stores a plethora of metadata information for the managed part of the file...
dncil
dncil is a Common Intermediate Language CIL disassembly library written in Python that supports parsing the header, instructions, and exception handlers of .NET managed methods. Parsed data is exposed through an object-oriented API to help you quickly develop CIL analysis tools using dncil. Why...
getrails
GETRAILS Lib of OSINT and Dork hacking that work with Google, Duckduckgo and Torch Feel free to contribute Run import getrails getrails.search'site:scanme.nmap.org' Try Google search if return error use Duckduckgo "http://scanme.nmap.org",... getrails.gogle"term" Searching Google...
rsyscall
Summary rsyscall is a library which provides a interface to an ever-growing subset of Linux system calls. This interface is: process-independent : all system calls are called as methods on process objects, which can refer to the "local" process or to other processes under our control, possibly on...
taser
Taser TASER Testing and Security Resource is an abstraction library used to simplify the process of creating offensive security tooling. The various protocols and classes help streamline development of custom tooling during engagements. The examples directory contains a number of scripts...
plecost
Plecost Professional WordPress Security Scanner Async-first, library-friendly, no external API required. Table of Contents What is Plecost? Plecost vs WPScan Quick Start Installation CVE Database CVE Detection Engine Scanning Detection Modules WooCommerce Security WP eCommerce Security Output...