airo-heat

airoheat Repositorio del equipo T1GR3$ en el hackathon de Cybercamp 2018 Presentación final en Cybercamp 2018: https://www.youtube.com/watch?v=l-iBtYxHAbQ Vídeo utilizado en Cybercamp 2018: https://www.youtube.com/watch?v=0DEitQNn7GQ Aircrack-ng Install modification sudo apt-get install...

http_bridge

Http Bridge Motivación Escribí este programa como una prueba de concepto para probar la idea de poder enviar paquetes de flujo TCP a través de solicitudes HTTP simples como PUT, PATCH, POST, GET, sin usar un método de proxy como CONNECT. También como ejercicio de práctica para entrenar mi novata...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: pip install frida-tools CLI tools pip install frida...

cve-2021-22005-exp

cve-2021-22005-exp 0x01 Vulnerability Overview On September 21, 2021, VMware released a security advisory disclosing 19 security vulnerabilities in vCenter Server, with CVSSv3 scores ranging from 4.3 to 9.8. Among them, the most critical vulnerability is an arbitrary file upload vulnerability in...

miasma

🌀 Miasma Las empresas de IA rastrean internet continuamente a una escala enorme, engullendo todo su contenido para usarlo como datos de entrenamiento para sus próximos modelos. Si tienes un sitio web público, ya están robando tu trabajo. ¡Miasma está aquí para ayudarte a contraatacar! Levanta el...

CVE-2021-22005_PoC

CVE-2021-22005PoC CVE-2021-22005PoC getshell: https://gist.github.com/testanull/c2f6fd061c496ea90ddee151d6738d2e verificar: https://github.com/knownsec/pocsuite3/blob/master/pocsuite3/pocs/20210923WEBVmwarevCenterServerFIleUploadCVE-2021-20050.py...

jndi-ldap-test-server

jndi-ldap-test-server This is a minimalistic LDAP server that is meant for test vulnerability to JNDI+LDAP injection attacks in Java, especially CVE-2021-44228. How to test vulnerability to CVE-2021-44228 1. Download the test server binary for your platform you can find all binaries under Release...

JNDI-Injection-Exploit

JNDI-Injection-Exploit Materials about JNDI Injection 中文文档 相关文章 Description JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. RMI server and LDAP server are based on marshals and modified further...

POC-CVE-2021-41773

POC-CVE-2021-41773 este es un script simple para el Apache HTTPd 2.4.49 que es vulnerable a CVE-2021-41773. Uso: Comprobar 1 IP Comprobar desde archivo...

CVE-2022-4616-POC

CVE-2022-46169 Pseudo Shell Description This Python script serves as a helper tool to streamline the process of exploiting the CVE-2022-46169 vulnerability. It starts an HTTP server that listens for incoming requests and provides a simple interface for the user to input commands. These commands a...

bleed

bleed bleed es una herramienta para probar servidores en busca de la vulnerabilidad 'Heartbleed' CVE-2014-0160. Uso $ bleed example.org Connecting... Sending Client Hello Waiting for Server Hello... Sending Heartbeat request Unexpected EOF receiving record header. Server closed connection. No...

CVE-2020-7247-POC

Foreword Key facts about the exploit Installing the vulnerable server Configuration Environment disclaimers Exploit Manual Exploitation Scripted Exploitation Foreword This repository should serve as a base to set up and exploit CVE-2020-7247 in a controlled and private environment. All of the...

CVE-2021-22005

CVE-2021-22005 VMware vCenter Server Arbitrary File Upload Vulnerability Code By: Junsheng @Orange Network Security Lab Orange Network Security Lab https://0range.team/ 0x00 Risk Overview This tool is only for authorized security testing. Unauthorized illegal attacks on sites are prohibited. Read...

server

Hashtopolis LoC Hashtopolis es una herramienta cliente-servidor multiplataforma para distribuir tareas de hashcat a múltiples computadoras. Los principales objetivos del desarrollo de Hashtopolis son la portabilidad, la robustez, el soporte multiusuario y la gestión de múltiples grupos. Para...

sqlipy

sqlipy SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API. SQLMap comes with a RESTful based server that will execute SQLMap scans. This plugin can start the API for you or connect to an already running API to perform a scan. Requirements Jython 2.7 up to 2.7.2 D...

snallygaster

snallygaster Encuentra fugas de archivos y otros problemas de seguridad en servidores HTTP. ¿qué? snallygaster es una herramienta que busca archivos accesibles en servidores web que no deberían ser públicos y que pueden suponer un riesgo de seguridad. Los ejemplos típicos incluyen repositorios gi...

CVE-2025-52691-APT-PoC

CVE-2025-52691 PoC: Carga Arbitraria de Archivos en SmarterMail RCE Mejorado con APT Este es un exploit de prueba de concepto PoC mejorado para CVE-2025-52691 , una vulnerabilidad crítica en el software de servidor de correo SmarterTools SmarterMail que permite la carga arbitraria de archivos sin...

CVE-2025-31161

CVE-2025-31161 Authentication bypass vulnerability in versions of the CrushFTP server...

MetasploitMCP

Metasploit MCP Server A Model Context Protocol MCP server for Metasploit Framework integration. https://github.com/user-attachments/assets/39b19fb5-8397-4ccd-b896-d1797ec185e1 Description This MCP server provides a bridge between large language models like Claude and the Metasploit Framework...

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks known as HAFNIUM. The reward is for information leading to h...