121505 matches found
CVE-2024-46538
This post is a research article published by EQSTLab. Thanks tophysicszq, who discovered this vulnerability. CVE-2024-46538 ★ CVE-2024-46538 PfSense Stored XSS lead to Arbitrary Code Execution PoC ★ https://github.com/user-attachments/assets/f41d0945-b7f4-4f88-bac5-265904256aae Description...
terminalphone
TerminalPhone Encrypted push-to-talk voice communication over Tor hidden services. TerminalPhone is a single, self-contained Bash script that provides anonymous, end-to-end encrypted voice and text communication between two or more parties over the Tor network. It operates as a walkie-talkie: you...
CVE-2021-26084_PoC
CVE-2021-26084PoC CVE-2021-26084 Confluence pre-auth RCE test script Usage: py...
CVE-2021-4034
CVE-2021-4034 self contained bash script, just run and pwn! with reference to Qualys' blog post https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt...
Heartexploit
Heartexploit Here is my new first exploit, this exploit attacks the HeartBleed vulnerability CVE-2014-0160, I hope you like it. This exploit only works on linux since part of it is made in languages not compatible with windows. The only command needed to start this application is: ./Heartexploit....
Log4j-Scanner-Exploit
Log4Shell-Scanner-Exploit Bash script that allows identifying and/or exploiting the Log4Shell vulnerability remotely. This tool performs various tests using LDAP payloads and X-Api-Version, User-Agent, and X-Forwarded-For headers. Always use this script with prior authorization from the owner of...
telegram-story-scraper
Telegram Story Scraper 📱 Un script en Python que te permite extraer y descargar automáticamente las historias de tus amigos de Telegram usando la librería Telethon. El script monitorea continuamente y guarda tanto fotos como videos de las historias, junto con sus metadatos. TGSS - Interfaz...
-cve-2022-22947-
-cve-2022-22947- cve-2022-22947 spring cloud gateway batch scanning script usage: python3 springcloudpoc.py ./urls.txt Use urls.txt to store url information URL format: https://xxx.xx.xx/ one per line Original Script Reference: https://github.com/lucksec/Spring-Cloud-Gateway-CVE-2022-22947 1...
PrivescCheck
PrivescCheck Quickly identify common Windows vulnerabilities and configuration issues that are not necessarily covered by public security standards, and collect useful information for exploitation and post-exploitation tasks. !IMPORTANT A major aspect to be aware of when using this tool is that a...
CVE-2020-14144-GiTea-git-hooks-rce
CVE-2020-14144 - GiTea authenticated RCE A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks Features Automatic reverse shell payload generation from IP and PORT Upload custom shell script and execute it remotely with option -f Automatic login with...
CVE-2022-39197-RCE
CVE-2022-39197-RCE First This project was modified from @its-arun project https://github.com/its-arun/CVE-2022-39197 When I tested the script, I found that the frida script could not query the data in the normal order. The method of modifying the frida script to modify the process name. Thanks to...
kalici-dosya-silme-araci
Permanent File Deletion Tool & Kalıcı Dosya Silme Aracı Este proyecto es una herramienta simple que permite a los usuarios eliminar permanentemente archivos específicos. El programa sobrescribe el archivo especificado con datos aleatorios, cambia el contenido del archivo y luego lo elimina,...
CVE-Vulnerability-Information-Downloader
Descargador de Información de Vulnerabilidades CVE Common Vulnerability Scoring System CVSS es un estándar industrial gratuito y abierto para evaluar la gravedad de las vulnerabilidades de seguridad en sistemas informáticos. Exploit Prediction Scoring System EPSS estima la probabilidad de que una...
network-attacker
Network-Attacker network-attacker V0.1 es un programa de script Bash para pruebas de estrés WiFi basado en Mdk3 Inundación de Balizas y Ataque de Desautenticación Creado para ayudar a principiantes e incluso profesionales en un ataque de inundación de balizas o desautenticación en redes Instalaci...
SPY-MASKER
SPY-MASKER 🔥 SPY-MASKER Es un simple script en Python para ocultar una URL de phishing bajo una URL de apariencia normal google.com o facebook.com. Puede integrarse en herramientas de phishing para que la URL parezca legítima. ⚖️ Descargo de responsabilidad legal: SOLO CON FINES EDUCATIVOS El uso...
FinalRecon
Twitter - Telegram - thewhiteh4t's Blog FinalRecon is an all in one automatic web reconnaissance tool written in python. Goal of FinalRecon is to provide an overview of the target in a short amount of time while maintaining the accuracy of results. Instead of executing several tools one after...
CVE-2019-0708-POC
CVE-2019-0708-POC Usage Instructions IP format: IP:port, save to ip.txt cve-2019-0708.py 100线程...
PartyLoud
Partyloud Recupera tu privacidad Genera navegación web falsa y mitiga el rastreo CodeFactor PartyLoud es una herramienta gratuita altamente configurable y sencilla que te ayuda a prevenir el rastreo directamente desde tu terminal Linux, sin necesidad de habilidades especiales. Una vez iniciada,...
CVE-2026-46300
Security Research & Legal Disclaimer This repository is for educational and authorized security research purposes only. Permitted Use Understanding security vulnerabilities and exploitation concepts in controlled environments local VMs, isolated labs Studying sandbox isolation mechanisms and thei...