Grafxploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

CVE-2024-3400-Checker

CVE-2024-3400-Checker 中文版本 A check program for CVE-2024-3400, Palo Alto PAN-OS unauthenticated command injection vulnerability. Usage: 1. Install requirements. python3 -m pip install -r requirements.txt 2. Run python3 main.py 3. Set threads in main.py, default is 20 workers...

CVE-2026-18504-CVE-2026-16732

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

opencanary

OpenCanary by Thinkst Canary OpenCanary is a multi-protocol network honeypot. It's primary use-case is to catch hackers after they've breached non-public networks. It has extremely low resource requirements and can be tweaked, modified, and extended. Overview OpenCanary runs as a daemon and...

thorse

THorse THorse is a RAT Remote Administrator Trojan Generator for Windows/Linux systems written in Python 3. This small python script can do really awesome work. Disclaimer :computer: This project was created only for good purposes and personal use. THIS SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRAN...

Crips

Crips IP Tools This Tools is a collection of online IP Tools that can be used to quickly get information about IP Address's, Web Pages and DNS records. Menu Whois lookup Traceroute DNS Lookup Reverse DNS Lookup GeoIP Lookup Port Scan Reverse IP Lookup INSTALL & UPDATE Exit Whois lookup Determine...

CAPE

CAPEv2 Python3 has now been released CAPEv2 With the imminent end-of-life for Python 2 January 1 2020, CAPEv1 will be phased out. Please upgrade to the Python 3 version as soon as possible. CAPE: Malware Configuration And Payload Extraction CAPE is a malware sandbox. It is derived from Cuckoo and...

kavanoz

🫙 kavanoz 🫙 Kavanoz jar in turkish is a tool to statically unpack common android banker malware. Do you ever wanted to get payload from packed malware without running android emulator ? Me neither : But here is a tool anyway. 👀 Installation pip install kavanoz To install from source, clone the...

CVE-2019-0708-POC

CVE-2019-0708-POC Working proof of concept for CVE-2019-0708, spawns remote shell. Run with python3, Example python3 CVE-2019-0708-windows.py Different versions are required for linux and Windows. Obfuscated for obvious reasons...

PAKURI-THON

PAKURI-THON Pentest Achieve Knowledge Unite Rapid Interface - Python PAKURI-THON is a tool that supports pentesters with various pentesting tools and C4 server command & control and chat & communication server. PAKURI-THON can perform most of the operations with intuitive web operations and...

react2shell-ultimate

React2Shell Ultimate Scanner v2.0 Professional Next.js RSC RCE Vulnerability Scanner for CVE-2025-66478 🎯 Overview React2Shell Ultimate is a comprehensive vulnerability scanner for CVE-2025-66478 - a critical Remote Code Execution RCE vulnerability affecting Next.js applications using React Serve...

overlord

Overlord – Red Teaming Automation Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules e.g. C2, Email Server, HTTP web delivery server, Phishing server etc. and the full infra...

Open-Redirect-Finder

Open-Redirect-Finder Open Redirect Finder is an automation tool used to detect open redirect vulnerabilities on a URL. Features Batch Processing: Supports testing multiple URLs at once from an input file. Automatic Validation: Checks whether the entered URLs are vulnerable to open redirects...

Bashfuscator

Bashfuscator Documentation What is Bashfuscator? Bashfuscator is a modular and extendable Bash obfuscation framework written in Python 3. It provides numerous different ways of making Bash one-liners or scripts much more difficult to understand. It accomplishes this by generating convoluted,...

CVE-2026-89274

CVE-2026-89274 — WP Recipe Maker Arbitrary Shortcode Execution Python 3 PoC scanner/exploit for CVE-2026-89274 in WP Recipe Maker. | ---|--- Plugin| wp-recipe-maker Affected| ≤ 10.8.1 Fixed in| 10.8.2+ CVSS| 9.1 Critical Auth| Unauthenticated comment submit CWE| CWE-94 Summary...

BlackDir-Framework

BlackDir-Framework 1 Spider Directories 2 Find Sub Domain 3 Advanced Dorks Search 4 Scan list of Dorks 5 Scan WebSites Xss,Sql,Html Inj 6 Reverse Ip Lookup 7 Port Scan 8 Brute Force Wordpress 9 Wordpress User Enumerate 10 Hash Encryptionmd4,md5,sha1,sha256,sha384,sha512 11 Hash Identifier Install...

RansomwareSim

RansomwareSim Overview RansomwareSim is a simulated ransomware application developed for educational and training purposes. It is designed to demonstrate how ransomware encrypts files on a system and communicates with a command-and-control server. This tool is strictly for educational use and...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

CVE-2026-39987.py

CVE-2026-39987.py This python script exploit the vulnerable marimo /terminal/ws endpoint and returns a interactive shell. HOW TO USE : The only change it has to be made is to the change the HOST variable in the script. After changing the HOST variable execute the script in your Terminal like the...

CVE-2026-24061

CVE-2026-24061 Exploit - Work Version v0.1 Usage Run the script with a target host: python3 exploit.py 192.168.1.1 -p 2323 --debug Arguments positional arguments: target IP or hostname of the target options: -h, --help show this help message and exit -p, --port PORT Port default 23 --debug Enable...