plasma

PLASMA The old project name was Reverse. PLASMA is an interactive disassembler. It can generate a more readable assembly pseudo code with colored syntax. You can write scripts with the available Python api see an example below. The project is still in big development. wiki : TODO list and some...

log4j-payload-generator

log4j-payload-generator log4j-paylaod generator : A generic payload generator for Apache log4j RCE CVE-2021-44228. Deployment To deploy this project run sudo git clone https://github.com/yesspider-hacker/log4j-payload-generator.git Running Tests To run tests, run the following command cd...

WP-CVE-2025-4322---Scan

Usage Normal Test python3 wp-backdoor-remote-scan.py https://misitio.com with JSON output python3 wp-backdoor-remote-scan.py https://misitio.com --json Adjust threads and timeout for rate-limited sites python3 wp-backdoor-remote-scan.py https://misitio.com --threads 5 --timeout 15...

Dorkify

Perform Google Dork search with Dorkify Google Dorking Google dorking is a hacker technique that uses Google Search to find security holes in the configuration and computer code that websites use. Google Dorking involves using advanced operators in the Google search engine to locate specific...

CnC-Botnet-in-Python

CnC-Botnet-in-Python C&C Botnet written in Python Description Simple botnet written in Python using fabric. The author is not responsible for the use of this code. Hosts It is possible to load hosts from a file hosts.txt included in the main directory of the project. The default format for this...

CVE-2026-8461

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

overlord

Overlord – Red Teaming Automation Overlord provides a python-based console CLI which is used to build Red Teaming infrastructure in an automated way. The user has to provide inputs by using the tool’s modules e.g. C2, Email Server, HTTP web delivery server, Phishing server etc. and the full infra...

MemITM

What's the MemITM tool? The MemITM Mem In The Middle tool has been developped in order to easily intercept "messages" in Windows processes memory. We developped a lot of custom memory interception tools in order to capture network messages before encryption, or IPC messages, and to be able to...

V3n0M-Scanner

Venom Offensive Security Framework for Vulnerability Scanning & Pentesting Warning : Version 4.3.3 now requires PROXIES/VPN. Features Cloudflare Resolver Cloudbuster LFI-RCE and XSS Scanning LFI to RCE & XSS SQL Injection Vuln Scanner SQLi Extremely Large D0rk Target Lists Detects known WAFs...

CVE-2023-29489

CVE-2023-29489 SynixCyberCrimeMY CVE-2023-29489 Scanner By SamuraiMelayu1337 & h4zzzzzz@scc How To Usage ? git clone https://github.com/SynixCyberCrimeMy/CVE-2023-29489 cd CVE-2023-29489 pip3 install -r requirements.txt python3 eksepelot.py Thanks To All SynixCyberCrimeMY Members...

CVE-2021-38295-PoC

CVE-2021-38295-PoC A simple Python proof of concept for CVE-2021-38295. Related Blog Post LINK TO BLOG Usage: Usage: cve-xxxx Simply supply the script with a host, a database which your creds have access too, and the username password pair. If everything works, you'll get a URL which links to the...

CVE-2025-55182-React-19.2.0

Exploitation Steps: 1. Download all files in this repository 2. Extract file.zip and name it rh-test 3. Run using npm run dev or yarn dev or pnpm dev or bun dev. 4. Open http://localhost:3000 in browser 5. Open a new terminal and run the command python3 react-exp.py http://localhost:3000 Follow...

CVE-2023-26360

CVE-2023-26360 Usage Usage: python3 script.py endpoint proxyurl Reading Files...

koppeling-p

koppeling-p Adaptive DLL hijacking / dynamic export forwarding - EAT preserve Overview This project is a limited, Python-only extension to the amazing project by Nick Landers @monoxgas, available here. Differences The only difference to the original project is that koppeling-p p stands for...

Needl

🚨 Needl is no longer maintained. If you need support or consultation for your privacy endeavours, drop me an e-mail [email protected] 🚨 Needl Take back your privacy. Lose yourself in the haystack. Your ISP is most likely tracking your browsing habits and selling them to marketing agencies...

cosa-nostra

Cosa Nostra Cosa Nostra is an open source software clustering toolkit with a focus on malware analysis. It can create phylogenetic trees of binary malware samples that are structurally similar. It was initially released during SyScan360 Shanghai 2016. I basically maintain it since 2016 for my one...

CVE-2019-7069-POC

Kibana ⚠️ Disclaimer: This script is for educational and authorized penetration testing only. Do not use it on systems you do not own or have explicit permission to test. The author and contributors are not responsible for any misuse or damage caused by this tool. 🎯 What is this? This is a Python ...

CVE-2021-21389

Usage 1. Build the vulnerable WordPress and BuddyPress environment using Docker. 2. Build and run the mariaDB container. 3. Ensure the two containers run on the same network. ex docker network create wordpressnetwork docker network connect wordpressnetwork wordpressapp docker network connect...

CVE-2025-55182-POC

CVE-2025-55182 – Command Injection Vulnerability Scanner Full Proof-of-Concept With Real Command Output This repository contains a Python-based proof-of-concept PoC scanner for CVE-2025-55182, demonstrating how an attacker could exploit a command injection vulnerability through a JSON-based POST...

py_certificate_extractor

pycertificateextractor Sometimes it necessary to extract certificate information from the digital signed file. Use this tool when that occurs. you can easily finish Let me know if there are any changes required or additional features need it. Features Extract the certificate information and...