interactsh

An OOB interaction gathering server and client library Features • Usage • Interactsh Client • Interactsh Server • Interactsh Integration • Join Discord Interactsh is an open-source tool for detecting out-of-band interactions. It is a tool designed to detect vulnerabilities that cause external...

ssrf-king

🔥 ssrf-king 🔥 v1.12 Latest SSRF plugin for burp that Automates SSRF Detection in all of the Request alt text If you are facing any problems or would like a new feature that is not listed below Please create a new issue below in this form Create New Issue Upcoming Features Checklist ✔️ It will soon...

CVE-2026-73570

CVE-2026-73570 CVE-2026-73570 PoC More echo 'EHLO mx-1787907797.invalid MAIL FROM: RCPT TO: QUIT\r\n' | nc 127.0.0.1 587...

smtp-tunnel-proxy

📧 SMTP Tunnel Proxy A high-speed covert tunnel that disguises TCP traffic as SMTP email communication to bypass Deep Packet Inspection DPI firewalls. ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┌──────────────┐ │ Application │─────▶│ Client │─────▶│ Server │─────▶│ Internet │ │ Browser │ TCP ...

CVE-2020-7247-POC

Foreword Key facts about the exploit Installing the vulnerable server Configuration Environment disclaimers Exploit Manual Exploitation Scripted Exploitation Foreword This repository should serve as a base to set up and exploit CVE-2020-7247 in a controlled and private environment. All of the...

OpenRelayMagic

OpenRelayMagic ╔═╗┌─┐┌─┐┌┐┌╦═╗┌─┐┬ ┌─┐┬ ┬╔╦╗┌─┐┌─┐┬┌─┐ ║ ║├─┘├┤ │││╠╦╝├┤ │ ├─┤└┬┘║║║├─┤│ ┬││ ╚═╝┴ └─┘┘└┘╩╚═└─┘┴─┘┴ ┴ ┴ ╩ ╩┴ ┴└─┘┴└─┘ Herramienta para probar relays abiertos vulnerables en servidores SMTP Características Verificar un solo objetivo/lista de dominios Puertos 587 y 465 implementados...

github-dorks

Github Dorks Github Search is a quite powerful and useful feature that can be used to search for sensitive data on repositories. Collection of Github dorks can reveal sensitive personal and/or organizational information such as private keys, credentials, authentication tokens, etc. This list is...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

xCrack Python Tools For Hackers

Enlace de descarga de TG: https://t.me/+0z9FapS4mBgyZjhl xCrack Herramienta de hacking en Python para hackers y spammers Requisitos: Python 3.x Probado en: Python 3.10.4 ► Sección de cPanel ◄ Comprobador masivo de cPanel activo Cargador masivo de cPanel a Shell Crackeador masivo de cPanel a SMTP...

Pikachu-SMTP

Pikachu-SMTP Fuerza bruta para usuarios de SMTP INSTRUCCIONES DE INSTALACIÓN $ git clone https://github.com/bloodbane0/Pikachu-SMTP.git $ cd Pikachu-SMTP $ ./pikachu Powershell-Pikachu $ .\pikachu.ps1...

mailenable-cve-2022-36934

MailEnable CVE-2022-36934 Exploit Module Metasploit module for MailEnable's authentication bypass vulnerability CVE-2022-36934, leading to remote code execution. 📌 Features Exploits MailEnable's improper input sanitization in SMTP/POP3 Supports both x86 and x64 Windows targets No user interaction...

CVE-2026-75962

The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'useremail' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and...

ARP-Spoof-Detector

/\ | | \ / | / | | \ | | | | / \ | | | | | | | | | | | | | | | | / /\ \ | /| / \ | ' \ / \ / | | | | | |/ \ / / | / | '| / | | \ | | | | | | | | | || | / || / | || | | // \| \| |/| ./ / /|| |/ |\||\/|| | | || Descripción Script detector de ataques ARP Spoofing realizados a su...

CVE-2026-75962

The Post SMTP WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 4.0.1 . The root cause is insufficient input sanitization and output escaping regarding the 'user_email' parameter. Attackers can bypass the plugin's validator by using numeric HT...

CVE-2026-75962 Post SMTP <= 4.0.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'user_email' Parameter (Multisite Registration → Failed Email Log)

The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'useremail' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and...

EUVD-2026-92961

The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'useremail' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and...

CVE-2023-51764

PoC for CVE-2023-51764 SMTP SMUGGLING Postfix CVE-2023-5176525.py Description This script allows sending messages using port 25 of the mail server. Usage Before running, modify the variables: smtpserver - address of the mail server fromaddress - sender of the first email toaddress - recipient of...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

msploitego

msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...