wheelaudit

wheelaudit Python Wheel File Security Scanner — scan .whl files for security issues before installation. Motivated by recent CVEs in Python wheel handling: CVE-2026-24049 : Path traversal in wheel unpack allows permission manipulation of system files CVE-2026-1703 : Path traversal when pip instal...

CVE-2026-31431

PoC Python for Copy Fail CVE-2026-31431 Python use nosplice variant...

CVE-2012-1823-exploit-for-https-user-password-web

CVE-2012-1823 file is exploit use : python3 CVE-2012-1823.py CVE-2012-1823,CVE-2021-2291.py file find out if the site is vulnurable for CVE-2012-1823 or CVE-2021-2291 use : python3 CVE-2012-1823,CVE-2021-2291.py command whoami cd ls tested on kali linux...

CVE-2014-6271

CVE-2014-6271 Shellshock Python Exploit A clean, efficient, and interactive Python implementation designed to test for the Shellshock vulnerability CVE-2014-6271 via HTTP environment variable injection. 📝 Description Shellshock CVE-2014-6271 is a critical security vulnerability in the Bash shell...

CVE-2023-44487

CVE-2023-44487 POC for CVE-2023-44487 written in python edit .env file to insert target url and edit total requests and concurrency. much love -qmvt...

CVE-2026-23744

CVE-2026-23744 python3 CVE-2026-23744.py -u http://devhub.htb:6274 -i 10.10.14.106 -p 4321...

Bludit-CVE-2019-17240-Fork

Bludit-CVE-2019-17240-Fork Better version of "rastating.github.io/bludit-brute-force-mitigation-bypass/" Pretty easy to use you'll only have to do : python3 BBFMB.py Then it'll ask you for the URL then the Username then the directory of the Wordlist cheese nom nom...

pwnkit-helper

Pkexec Local Privilege Escalation PwnKit Exploit source. If You Want To Know More About This Exploit, Check: CVE-2021-4034 This Exploit Helper Work Fine With Python3, And Make Sure You Installed The Packages. Will Make It So Easy To Get The Root Fl4g, GOOD LUCK!...

CVE-2017-7269

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2017-7269 Run bellow command to check CVE-2017-7269 -h Configurations 2. We integrated with the Telegram API to receive...

spark-python-ds-static

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-python-ds-static spark-python-ds-static Class: Privilege leftover Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software Foundation DataSourceManager.dataSourceBuilders is a JVM-global first-wins map...

HoneyPy

HoneyPy 🍯 A low interaction honeypot with the capability to be more of a medium interaction honeypot. Project status: No longer in active development. Repository will remain for anyone wanting to use or contribute to HoneyPy. I recommend using the honeydb-agent instead:...

bLuEkEeP-GUI

bLuEkEeP-GUI CVE-2019-0708 vulnerability testing and exploitation I am not responsible for the misuse of the software, it is for educational purposes only... bleukee-GUI serves both to test machines with the CVE-2019-0708 vulnerability and can also be used to hack, that is why I left the code ful...

CVE-2020-3187

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2020-3187 Run bellow command to check CVE-2020-3187 -h Configurations 2. We integrated with the Telegram API to receive...

mcpshield

mcpshield A drop-in fix for the unpatched MCP STDIO command-injection flaw the CVE-2026-30623 family, disclosed by OX Security in April 2026 as "by design" -- no SDK patch is coming. Import one line, and every stdio MCP server your Python app launches gets its command/args/env validated before th...

CVE-2025-64512

CVE-2025-64512 — pdfminer.six Insecure Deserialization Pickle via Crafted PDF ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table o...

CVE-2026-60004

CVE-2026-60004 More: https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Dock...

Wordpress-Default-Password

Wordpress Default U/P python 2.7 Donation : BTC : 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money : U22270614 Encrypt By Azim !...

14641-v2

CVE-2010-2861 14641-v2 I was annoyed that only a python2 version of this classic exploit is available...

CVE-2026-24061

CVE-2026-24061 Exploit - Work Version v0.1 Usage Run the script with a target host: python3 exploit.py 192.168.1.1 -p 2323 --debug Arguments positional arguments: target IP or hostname of the target options: -h, --help show this help message and exit -p, --port PORT Port default 23 --debug Enable...

CVE-2024-29269

Telesquare TLR-2005KSHRCE CVE-2024-29269 Batch scan/exploit 1.このツールはセキュリティテストのみに使用されており、違法な攻撃については責任を負いません. 2.The tool is only used for security testing, and I am not responsible for any illegal attacks. 3.工具仅用于安全测试，任何非法攻击本人概不负责. Help / /\ //\ | \ / \ | || | | \ / \ \ / / / \ / / \ \ / /\ | | |...