telegram-c2

Telegram C2 Comando y control de un servidor a través de bots de Telegram. Instalación Tutorial Video Crea un bot de Telegram Edita main.py, establece BOTAPIKEY como la clave API del bot y telegramuserid como tu ID de Telegram Instala las siguientes dependencias pip install -r requirements.txt...

MetasploitMCP

Metasploit MCP Server A Model Context Protocol MCP server for Metasploit Framework integration. https://github.com/user-attachments/assets/39b19fb5-8397-4ccd-b896-d1797ec185e1 Description This MCP server provides a bridge between large language models like Claude and the Metasploit Framework...

AdGuardHome

Privacy protection center for you and your devices Free and open source, powerful network-wide ads & trackers blocking DNS server. AdGuard.com | Wiki | Reddit | Twitter | Telegram AdGuard Home is a network-wide software for blocking ads and tracking. After you set it up, it'll cover ALL your home...

ghostsplice

GhostSplice: cross-channel trust fragmentation attack PoC Proof-of-concept code for GhostSplice , an attack from the ASSET Research Group. The full write-up is "The AI refused to steal the secrets. So we handed it a form.". The idea in plain words AI coding assistants like Cursor, VS Code with...

damn-vulnerable-MCP-server

Cursor SSE Compatibility for Damn Vulnerable MCP This document provides an overview of the updates made to the Damn Vulnerable Model Context Protocol DVMCP project to make it compatible with Cursor's Server-Sent Events SSE implementation. Overview The original DVMCP project has been enhanced to...

CVE-2024-22263_Scanner

CVE-2024-22263Scanner For Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility. CVE-2024-22263: Spring Cloud Dataflow Arbitrary File Writing Usage ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗...

Security Bulletin: Due to use of QOS.CH logback, IBM Cloud Pak System is affected by server-side request forgery and arbitrary code execution

Summary Due to use of QOS.CH logback IBM Cloud Pak System is affected by server-side request forgery and arbitrary code execution CVE-2024-12801, CVE-2024-12798. Those issues were addressed by IBM Cloud Pak System v2.3.6.2. Vulnerability Details CVEID:CVE-2024-12801 DESCRIPTION: Server-Side Reque...

CVE-2024-4358

Telerik Report Server Bypass de Autenticación - CVE-2024-4358 Descargo de responsabilidad : Esta Prueba de Concepto POC está realizada únicamente con fines educativos y de pruebas éticas. El uso de esta herramienta para atacar objetivos sin consentimiento mutuo previo es ilegal. Es responsabilida...

angryFuzzer

AngryFuzz3r Status: Development About the AngryFuzz3r project AngryFuzz3r is a collection of tools for pentesting to gather information and discover vulnerabilities of the targets based on Fuzzedb https://github.com/fuzzdb-project/fuzzdb project UrlFuzz3r-AngryFuzz3r1 Discover hidden files and...

CVE-2025-55182-React2Shell

CVE-2025-55182-React2Shell xpl0ited by infrar3d A 10.0 critical severity vulnerablility affecting server-side use of React.js, tracked as CVE-2025-55182 in React.js and CVE-2025-66478 specifically for the Next.js framework. This vulnerability was responsibly disclosed by Lachlan Davidson on 29...

Krawl

Krawl Un servidor honeypot web moderno y personalizable diseñado para detectar y rastrear actividad maliciosa de atacantes y rastreadores web mediante páginas web engañosas, credenciales falsas y canary tokens. Tabla de Contenidos Demo ¿Qué es Krawl? Panel de Krawl Modos de Despliegue Lista de...

sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

CVE-2026-44578

CVE-2026-44578 — Next.js WebSocket Upgrade SSRF Pre-authentication Server-Side Request Forgery in Next.js self-hosted deployments. A single crafted HTTP request extracts AWS credentials, secrets, and internal service data from localhost:80. Field| Value ---|--- CVE| CVE-2026-44578 GHSA|...

CVE-2023-22515-Scan

CVE-2023-22515-Scan About This is simple scanner for CVE-2023-22515, a critical vulnerability in Atlassian Confluence Data Center and Server that is actively being exploited in the wild by threat actors in order "to create unauthorized Confluence administrator accounts and access Confluence...

ProxyLogon

ProxyLogon For Python3 ProxyLogonCVE-2021-26855+CVE-2021-27065 Exchange Server RCESSRF-GetWebShell usage: python ProxyLogon.py --host=exchange.com [email protected] python ProxyLogon.py --host=exchange.com --mails=./mails.txt args: --host: target's address. --mail: exists user's mail. --mail...

CVE-2017-9544

CVE-2017-9544 Exploit para desbordamiento de búfer basado en SEH en Easy Chat Server CVE-2017-9544 Basado en: pwntools msfvenom / reversetcp payload ropper x64dbg Aplicación vulnerable disponible en https://www.exploit-db.com/exploits/42155 Configuración Configurar IP de víctima a 192.168.15.100 ...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...

cert-pinning-flaw-poc

cert pinning flaw POC Simple POC script for testing CVE-2016-2402 and similar flaws. Read my blog post for details. This utility will set up a HTTPS server that servers a malicious certificate chain to the client for a specific domain. If traffic from an app with a vulnerable certificate pinning...

CVE-2017-9833

CVE-2017-9833 Reference: https://www.cvedetails.com/cve/CVE-2017-9833/ Shodan dork: product:"Boa Web Server" 0.94.14rc21 Payload: /cgi-bin/wapopen/?FILECAMERA=../../etc/shadow POC:...

ligolo-mp

Ligolo-MP : tunelización como una VPN, ¡ahora con amigos! Ligolo-MP es una versión avanzada de Ligolo-ng, con arquitectura cliente-servidor, que permite a los pentesters jugar con múltiples túneles concurrentes de forma colaborativa. Gestiona todos tus TUN automáticamente, mientras también...