cve-2023-41993-test

original poc from po6ix post exploitation i copied from nikiasb's and Linus Henze's regexp exploits, 5aelo's Phrack paper/Pwn2Own 2018 exploit chain, LiveOverflow blog/youtube series...

CVE-2024-2887

CVE-2024-2887 This is a short writeup for the CVE-2024-2887, which I used to claim V8CTF M123. When define more types than kV8MaxWasmTypes, which can be achieved by padding more types in RecGroup, the types index can be more than 20bits and then overflowed. Then two types can be considered same a...

Modlishka

..Modlishka.. Modlishka is an open-source penetration testing tool that acts as a man-in-the-middle proxy. It introduced a new technical approach to handling browser-based HTTP traffic flow, which allows it to transparently proxy multi-domain destination traffic, both TLS and non-TLS, over a sing...

toolbox

-Significant%20AI%2C%20fully%20reviewed-1f77b4 MCP-based application security testing tools for your coding agent. Not a scanner — a collaborative workbench. Agents struggle with UI and stateful APIs; you're good at both. Sectool lets you explore an application through its proxy while an agent...

phuip-fpizdam

PHuiP-FPizdaM What's this This is an exploit for a bug in php-fpm CVE-2019-11043. In certain nginx + php-fpm configurations, the bug is possible to trigger from the outside. This means that a web user may get code execution if you have vulnerable config see below. Writeup While we were too lazy t...

freedomfighting

Freedom Fighting scripts This repository contains scripts which may come in handy during your freedom fighting activities. It will be updated occasionally, when I find myself in need of something I can't find online. Everything here is distributed under the terms of the GPL v3 License...

PCWT

PCWT A web application that makes it easy to run your pentest and bug bounty projects. Description The app provides a convenient web interface for working with various types of files that are used during the pentest, automate port scan and subdomain search. Main page Project settings Domains...

github-endpoints

github-endpoints Find endpoints on GitHub. Description This Go tool performs searches on GitHub and parses the results to find endpoints of a given domain. Install go install github.com/gwen001/github-endpoints@latest or git clone https://github.com/gwen001/github-endpoints cd github-endpoints go...

ruzzy

Ruzzy A coverage-guided fuzzer for pure Ruby code and Ruby C extensions. Ruzzy is heavily inspired by Google's Atheris, a Python fuzzer. Ruzzy uses libFuzzer or LibAFL for its coverage instrumentation and fuzzing engine. Ruzzy also supports AddressSanitizer and UndefinedBehaviorSanitizer when...

bbs

BBS The old bbs can be found here Description bbs is a router for SOCKS and HTTP proxies. It exposes SOCKS5, HTTP CONNECT or port forwarding services and forwards incoming requests to proxies or chains of proxies based on the request's target. Routing can be configured with a PAC script if built...

egodeath

egodeath This project does not achieve indistinguishability obfuscation. You should not be using this to product to protect secrets. It exists to deter reverse engineering, not prevent it A JavaScript obfuscator designed to make code extremely difficult to read and analyze for both humans and LLM...

extractTVpasswords

Extract password from TeamViewer memory using Frida CVE-2018-14333 Hi there, in this article we want to tell about our little research about password security in TeamViewer. The method can help during the pentest time for post exploitation to get access to another machine using TeamViewer...

trufflehog

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...

hcxtools

hcxtools A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper. These tools are 100% compatible with Hashcat and John the Ripper and are endorsed by Hashcat. Brief Description The main purpose of hcxtools is to detect weak points within...

bluemonday

bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...

progress-burp

Progress Tracker Burp Suite extension to track vulnerability assessment progress. Features Capturing items unique requests from the Burp Suite tools Proxy, Repeater, Target. Request unique key is defined as follows: target host, port, protocol, path and method. Items have following editable...

assless-chaps

assless-chaps Crack MSCHAPv2/NTLMv1 challenge/responses quickly using a database of NT hashes Introduction Assless CHAPs is an efficient way to recover the NT hash used in a MSCHAPv2/NTLMv1 exchange if you have the challenge and response e.g. from a WiFi EAP WPE attack. It requires a database of ...

url-regex-safe

url-regex-safe Regular expression matching for URL's. Maintained, safe, and browser-friendly version of url-regex. Resolves CVE-2020-7661cve for Node.js servers. Works in Node v14+ and browsers. Maintained for Spam Scannerspam-scanner and Forward Emailforward-email. Table of Contents Foreword...

BounceBack

BounceBack ↕️🤫 Stealth redirector for your red team operation security. Overview BounceBack is a powerful, highly customizable and configurable reverse proxy with WAF functionality for hiding your C2/phishing/etc infrastructure from blue teams, sandboxes, scanners, etc. It uses real-time traffic...

DefaultCreds-cheat-sheet

Default Credentials Cheat Sheet One place for all the default credentials to assist pentesters/blue Teamers during engagements, featuring default login/password details for various products sourced from multiple references. P.S : Most of the credentials were extracted from changeme,routersploit a...