CVE-2023-48795

🛡️ Terrapin Vulnerability Scanner CVE-2023-48795 A Python tool to identify SSH servers potentially vulnerable to CVE-2023-48795 Terrapin by extracting OpenSSH version banners over port 22 using netcat. 📌 Description This scanner checks if a target SSH server is running a vulnerable version of...

agentic-radar

A Security Scanner for your agentic workflows! View Demo · Documentation · Report Bug · Request Feature Table of Contents 1. Description 2. Agentic Visualizer 3. Getting Started Prerequisites Installation 4. Advanced Installation CrewAI Installation OpenAI Agents Installation 5. Usage 6. Advanced...

twittor

Twittor A stealthy Python based backdoor that uses Twitter Direct Messages as a command and control server This project has been inspired by Gcat which does the same but using a Gmail account. Setup For this to work you need: A Twitter account Use a dedicated account! Do not use your personal one...

Log4Shell-Scanner

Log4Shell-Scanner Python script to detect Log4Shell Vulnerability CVE-2021-44228...

CVE-2022-0265

CVE-2022-0265 Put ysoserial.jar in the same directory. example python CVE-2022-0265.py 127.0.0.1 URLDNS "http://xxx.log."...

SMBSR

STOP THERE! This tool is no longer mantained! Decided to merge the feature of SMBSR and RSMBI, please refer to SMBAT SMBSR - what is that? Well, SMBSR is a python script which given a CIDR/IP/IPfile/HOSTNAMEs enumerates all the SMB services listening 445 among the targets and tries to authenticat...

smuggler

/ | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler An HTTP Request Smuggling / Desync testing tool written in Python 3 Acknowledgements A special thanks to James Kettle for his research and methods into HTTP desyncs And a special thanks to Ben Sadeghipour...

multiscanner

MultiScanner Introduction MultiScanner is a file analysis framework that assists the user in evaluating a set of files by automatically running a suite of tools for the user and aggregating the output. Tools can be custom built Python scripts, web APIs, software running on another machine, etc...

FuzzAP

FuzzAP A python script for obfuscating wireless networks ''' Warning: I am not a programmer by trade, nor would I consider myself one The common SSID list was pulled from https://wigle.net/gps/gps/Stat The OUI vendor list was parsed from http://standards.ieee.org/develop/regauth/oui/oui.txt for...

device-pharmer

device-pharmer Concurrently open either Shodan search results, a specified IP, IP range, domain, or list of IPs from a text file and print the status and title of the page if applicable. Add the -u and -p options to attempt to login to the page first looking for a form login and failing that,...

polytracker

PolyTracker PolyTracker is a tool originally created for the Automated Lexical Annotation and Navigation of Parsers , a backronym devised solely for the purpose of referring to it as The ALAN Parsers Project. However, it has evolved into a general purpose tool for efficiently performing data-flow...

FBIntelPy

FBIntelPy: Python Facebook Intelligence OSINT Search Tool FBIntelPy is a Python-based Facebook intelligence search tool that aims to assists in generating filtered Facebook URLs. This is was created for the upcoming TraceLabs Search Party 2026.02. This was inspired by IntelTechnqiue's web-based...

pystinger

pystinger English | 简体中文 Pystinger implements SOCK4 proxy and port mapping through webshell. It can be directly used by metasploit-framework, viper, cobalt strike for session online. Pystinger is developed in python, and currently supports three proxy scripts: php, jspx and aspx. Usage Suppose th...

ipv6tools

IPv6Tools The IPv6Tools framework is a robust set of modules and plugins that allow a user to audit an IPv6 enabled network. The built-in modules support enumeration of IPv6 features such as ICMPv6 and Multicast Listener Discovery MLD. In addition, the framework also supports enumeration of Upper...

docf-sec-check

DocF-Sec-Check Description DocF-Sec-Check helps to make your Dockerfile commands more secure. ScreenShot Done First-level security notification in the Dockerfile TODO List Correctly detect the Dockerfile. Second-level security notification in the Dockerfile. Security notification in Docker images...

SPY-MASKER

SPY-MASKER 🔥 SPY-MASKER It is a simple Python Script to hide phishing URL under a normal looking URL google.com or facebook.com. It can be integrated into Phishing tools to look the URL legit. ⚖️ Legal Disclaimer: FOR EDUCATIONAL PURPOSES ONLY Usage of SPY-MASKER for attacking targets without prio...

CVE-2018-16763-exploit

CVE-2018-16763-exploit This is an updated version of the CVE-2018-16763 for fuelCMS 1.4.1 The script bases itself on the one from https://www.exploit-db.com/exploits/47138 The script is updated for usage with Python 3...

NTP_Trojan

NTPTrojan About Reverse ntp remote access trojan in python, for penetration testers. For more information about roadmap and inspiration see: http://lockboxx.blogspot.com/2015/04/python-ntp-trojan.html References Server is heavily derived from: https://github.com/limifly/ntpserver...

GitHub-gato

Gato Github Attack TOolkit Gato, or GitHub Attack Toolkit, is an enumeration and attack tool that allows both blue teamers and offensive security practitioners to evaluate the blast radius of a compromised personal access token within a GitHub organization. The tool also allows searching for and...

CVE-2012-2982-Python-PoC

CVE-2012-2982-Python-PoC This was converted from a metasploit module as an exercise for OSCP studying. It originally came from becoming frustrated with no public exploits to use manually for the box Gamezone from TryHackMe. I anaylzed the metasploit code and coverted it to python. Proof screensho...