SQLiDetector

SQLiDetector Script simple en Python compatible con el perfil BurpBounty que te ayuda a detectar inyecciones SQL "basadas en errores" enviando múltiples solicitudes con 14 payloads y verificando 152 patrones regex para diferentes bases de datos...

community-scripts

Community Scripts A collection of ZAP scripts provided by the community, i.e. you lot : The easiest way to use this repo in ZAP is to install the 'Community Scripts' add-on from the ZAP Marketplace. !CAUTION While we do review all scripts to ensure they don't do anything obviously malicious, you...

antivmdetection

Antivmdetection Background A script to help you create templates, which you can use with VirtualBox to make VM detection harder. My first post on the subject was in 2012 and have after that been updated at random times. The blog format might have not been the best way of publishing the informatio...

CVE-2021-31166

CVE-2021-31166 simple bash script for exploit CVE-2021-31166...

-CVE-2023-30845

CVE-2023-30845 This is a script for CVE 2023-30845 automatically across multiple subdomains Metódos de uso: CLONE REPOSITORY| GIVE PERMISSION TO THE FILE| RUN THE FILE ---|---|--- https://github.com/himori123/-CVE-2023-30845.git| chmod +x CVE-2023-30845.sh| ./CVE-2023-30845.sh...

reconftw

reconFTW reconFTW es una potente herramienta automatizada de reconocimiento diseñada para investigadores de seguridad y pentesters. Agiliza el proceso de recopilación de inteligencia sobre un objetivo mediante la enumeración de subdominios, el escaneo de vulnerabilidades, OSINT y más. Con un dise...

cve-2020-7799

cve-2020-7799 Batch detection of cve-2020-7799 Add a text.txt file in the same directory The URL format in the file is as follows: www.baidu.com 132.231.132.132 133.12.122.13:8080 Run: python3 cve-2020-7799.py Note: It is prohibited to use any resources of this project for illegal testing!...

Paste2Web

Paste2Web - beta version A python3 script that uses cl1p website to send and receive secret messages How does it work ? -On sending it spliting the message to words then generates a random word and uses it in posting every word alone in a link and gives you a key -Now to receive you should contac...

ngxray

ngxray Static vulnerability scanner for nginx configurations. Parses configs with nginx's own tokenizer and matches against declarative JSON rules to detect known CVEs in rewrite/script engine directive patterns. Quick start cd ngxray git submodule update --init make python3 scan.py...

CVE-2019-14287

CVE-2019-14287 A script to check for the sudo security bypass CVE-2019-14287. This script checks for a vulnerable sudo version and tries to exploit it. It can run alone or can be integrated into a enumeration scanner like LinEnum.sh...

Grafana-LFI-exploit

Grafana LFI exploit Updated exploit script for the CVE-2021-43798 from the following: https://www.exploit-db.com/exploits/50581 https://vulncheck.com/blog/grafana-cve-2021-43798 Usage 1. Update on line 5 ip and line 6 port to fit the target. 2. Run the script python3 grafana-exploit.py...

docker-bench-security

Docker Bench for Security The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production. The tests are all automated, and are based on the CIS Docker Benchmark v1.6.0. We are making this available as an open-source utili...

CVE-2019-16278-PoC

CVE-2019-16728-PoC CVE-2019-16728 Reference https://git.sp0re.sh/sp0re/Nhttpd-exploits/src/branch/master/CVE-2019-16278.sh...

Hacknetics

Hacknetics Hacknetics 🛡️ Propietario: ice-wzl Colaboradores: ice-wzl, Jfox32199 Por favor, considera donar: https://buymeacoffee.com/icewzl Descripción: ¡Tu referencia integral para OSCP y Red Teaming! 🚀 Este repositorio contiene una colección curada de fragmentos de código, guías, sintaxis de...

WSL_Payload_Builder

WSL Payload Builder Disclaimer This tool is intended for legitimate security research and penetration testing. Users are responsible for ensuring they have proper authorization before testing systems they do not own or have explicit permission to test. Overview A shell script for creating minimal...

APTSimulator

APT Simulator Important: Don't just ZIP download or clone the repo if you don't plan to develop some test. Use the package in the release which contains a packaged version with encrypted archives that don't contain cleartext samples and tools. APT Simulator is a Windows Batch script that uses a s...

PAN-OS_CVE-2024-9474

python3 exp.py...

BadUSB-Files-For-FlipperZero

Ducky-Script-For-FlipperZero This repository is a collection of scripts which have been updated specifically For the BadUSB/BadKB function on FlipperZero. They should however work just fine on any device that uses Ducky Script. These scripts range from harmless pranks to nefarious red team tools...

wannafind

wannafind Simple script using nmap to detect CVE-2017-0143 MS17-010 Windows SMB and CVE-2017-7494 SAMBA in your network Usage: wannafind.sh IP|Network wannafind.sh 192.168.1.0/24...

CVE-2014-0346

CVE-2014-0160 Heartbleed Test Script This script checks for the infamous Heartbleed vulnerability CVE-2014-0160 in SSL/TLS servers. 📜 Credits Based on the original script by Jared Stafford [email protected] Modified and updated by Songül Kızılay for educational and research purposes ⚠️...