dncil

dncil is a Common Intermediate Language CIL disassembly library written in Python that supports parsing the header, instructions, and exception handlers of .NET managed methods. Parsed data is exposed through an object-oriented API to help you quickly develop CIL analysis tools using dncil. Why...

CVE-2024-23897

Usage python poc.py usage: python poc.py http://127.0.0.1:8888/ /etc/passwd...

slmail-exploit

These Python scripts are for educational purposes only! ⚫ Example of use: python exploit.py 192.168.0.100 ip victm DO NOT FORGET TO OPEN THE DOOR IN YOUR MACHINE...

sashay

Sashay Introduction ℹ️ Sashay is an all in one automatic installer for useful Linux based tools.There are over 340 tools available. Installation⬇️ pip install -U sashay Tool Categories Information Gathering Vulnerability Scanner Exploitation Tools Wireless Testing Forensics Tools Web Hacking Stress...

TokenBreaker

TokenBreaker Token Breaker is focused on 2 particular vulnerability related to JWT tokens. None Algorithm RSAtoHMAC Refer to this link about insights of the vulnerability and how an attacker can forge the tokens Try out this vulnerability here TheNone Usage usage: TheNone.py -h -t TOKEN...

wxpath

wxpath - declarative web graph traversal with XPath NEW: TUI - Interactive terminal interface powered by Textual for testing wxpath expressions and exporting data. Install Requires Python 3.10+. pip install wxpath For TUI support: pip install "wxpathtui" Immediately launch the TUI via uv: uvx...

CVE-2020-6308-mass-exploiter

CVE-2020-6308-mass-exploiter CVE-2020-6308 mass exploiter/fuzzer. usage: CVE-2020-5902-mass-exploiter.py -l list.txt -w workers...

pyscan

Pyscan Pyscan is a highly concurrent vulnerability scanner written in Rust. It automatically traverses your Python project, extracts dependencies across various packaging formats, and cross-references them against the Open Source Vulnerabilities OSV database in a single asynchronous batch request...

yarasafe

YARASAFE - Automatic Binary Function Similarity Checks with Yara SAFE is a tool developed to create Binary Functions Embedding developed by Massarelli L., Di Luna G.A., Petroni F., Querzoni L. and Baldoni R. You can use SAFE to create your function embedding to use inside yara rules. If you are...

Search-That-Hash

➡️ Discord ⬅️ The Fastest Hash Cracking System pip3 install search-that-hash && sth 🤔 Overview Tired of going to every website to crack your hash? Search-That-Hash automates this process in less than 2 seconds. Search-That-Hash searches the most popular hash cracking sites and automatically inputs...

Grafana_POC-CVE-2021-43798

Grafana-Poc Do not use this tool for illegal purposes. 1. Usage: python3 grafanahole.py Fill in ip:port in domain.txt 2. Vulnerability Impact Scope Affected versions: Grafana 8.0.0 - 8.3.0 Safe versions: Grafana 8.3.1, 8.2.7, 8.1.8, 8.0.7...

mi-x

Am I Exploitable? Author: 2022 - Now, Rezilion Description: Vulnerabilities validation Development: January 2022 - Now Documentation: See website, README Introduction Description ‘Am I Exploitable?’ is a python open source project that comes to meet the need of validating if your system is...

CVE-2020-11650

FreeNAS DoS CVE-2020-11650 python3 attack.py TargetIP...

requests-racer

Requests-Racer Requests-Racer is a small Python library that lets you use the Requests library to submit multiple requests that will be processed by their destination servers at approximately the same time, even if the requests have different destinations or have payloads of different sizes. This...

CVE-2024-24590-ClearML-RCE-CMD-POC

ClearML Exploit Script This repository contains a Python exploit script for CVE-2024-24590 The script is designed to upload a malicious pickle file to ClearML, which executes a reverse shell or a custom command. Features Uploads a malicious pickle artifact to ClearML. Executes a reverse shell or ...

CVE-2014-0346

CVE-2014-0160 Heartbleed Test Script This script checks for the infamous Heartbleed vulnerability CVE-2014-0160 in SSL/TLS servers. 📜 Credits Based on the original script by Jared Stafford [email protected] Modified and updated by Songül Kızılay for educational and research purposes ⚠️...

zip_bomb

ZIP Bomb Creator ZIP Bomb Creator is a tool used to create a ZIP file that is small in size but drastically expands when extracted. This is useful for security experiments and testing file systems against ZIP Bomb attacks. Features Create a ZIP Bomb with configurable file count and size. Supports...

pwnkit-helper

Pkexec Local Privilege Escalation PwnKit Exploit source. If You Want To Know More About This Exploit, Check: CVE-2021-4034 This Exploit Helper Work Fine With Python3, And Make Sure You Installed The Packages. Will Make It So Easy To Get The Root Fl4g, GOOD LUCK!...

dbslice

dbslice Extract minimal, referentially-intact database subsets for local development and debugging. The Problem Copying an entire production database to your machine is infeasible. But reproducing a bug often requires having the exact data that caused it. dbslice solves this by extracting only th...

NoEyes

NoEyes 🔒 Secure Terminal Chat End-to-end encrypted group chat, private messages, and file transfer in your terminal. The server is a blind forwarder: it cannot read your messages, does not know your username, does not know the room you are in, and cannot link any two messages to the same person,...