401 matches found
backdoor-apk
backdoor-apk backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have working knowledge of Linux, Bash, Metasploit, Apktool, the Android SDK, smali, etc. This shell script is provided as-is without warranty of...
nmapAutomator
nmapAutomator A script you can run in the background! Summary The main goal for this script is to automate the process of enumeration & recon that is run every time, and instead focus our attention on real pentesting. This will ensure two things: 1. Automate nmap scans. 2. Always have some recon...
claude-poc
There are multiple ways to abuse Claude code, this is one of them which I found during my research & reported November 23, 2025 not-fixed, might come handy while doing RT/PT for inital access. Summary: The apiKeyHelper is a custom shell script /bin/sh designed to generate authentication values fo...
EUVD-2026-80248
An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root privileges. The shell script remains active even after a reboot...
DDexec
DDexec news I have updated DDexec so much it is barely recognizable, the parsing of the ELF is now done by machine code instead of by the shell script, making it far faster, reliable and comprehensible. It has also reduced its number of dependencies to the absolute minimum. It also now barely...
CVE-2020-14144-GiTea-git-hooks-rce
CVE-2020-14144 - GiTea authenticated RCE A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks Features Automatic reverse shell payload generation from IP and PORT Upload custom shell script and execute it remotely with option -f Automatic login with...
sidedoor
sidedoor sidedoor mantiene una conexión SSH o un túnel con un demonio de script de shell. El caso de uso principal es mantener un reenvío de puerto remoto al servidor SSH local o a otro puerto. De esta manera, se puede acceder al dispositivo local sin utilizar conexiones entrantes que podrían est...
htrace.sh
Descripción htrace.sh es un script de shell para la resolución de problemas y la creación de perfiles de http/https. También es un simple envoltorio alrededor de varias herramientas de seguridad de código abierto. Para una comprensión más detallada de htrace.sh, sus parámetros, funciones y cómo...
htrace.sh
Description htrace.sh is a shell script for http/https troubleshooting and profiling. It's also a simple wrapper around several open source security tools. For a more detailed understanding of htrace.sh, its parameters, functions and how it all works, run htrace.sh --examples or see the Wiki...
hblock
Improve your security and privacy by blocking ads, tracking and malware domains. What is this for? hBlock is a POSIX-compliant shell script that gets a list of domains that serve ads, tracking scripts and malware from multiple sources and creates a hosts file, among other formats, that prevents...
deepce
deepce root@kitploit: . == === /"""""""""""""""""/ === / ===- \ X / \ \ / \/ / / / / / / / / \ ENUMERATE / // / / / // / / / ESCALATE ,/// ./// ESCAPE // Website Docker Enumeration, Escalation of Privileges and Container Escapes DEEPCE In order for it to be compatible with the maximum...
moveit-payload-decrypt-CVE-2023-34362
moveit-payload-decrypt-CVE-2023-34362 This shellscript given the OrgKey 0 will parse the header of the base64 artifacts found in MOVEit Logs and decrypt the Serialized object used a payload...
macos-collector
macos-collector macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR macos-collector.sh is a Shell script utilized to collect macOS Forensic Artifacts from a compromised macOS endpoint using primarily Aftermath by Jamf Threat Labs. Download Download the latest version of...
oversight
Oversight v0.5.8 Oversight is a terminal-based security intelligence tool designed to audit shell scripts and commands before they touch your system. It bridges the gap between "blind trust" and "manual auditing" by providing a high-speed, interactive analysis of both local files and remote scrip...
lunar
LUNAR Auditoría y Reporte de UNIX Lockdown Versión Versión actual 15.9.1 Consulte lunar.sh y el registro de cambios para obtener información de versión más actualizada. Licencia CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Apóyame aquí: https://ko-fi.com/richardatlateralblast AVISO...
WSL_Payload_Builder
WSL Payload Builder Disclaimer This tool is intended for legitimate security research and penetration testing. Users are responsible for ensuring they have proper authorization before testing systems they do not own or have explicit permission to test. Overview A shell script for creating minimal...
cve-2017-0358.sh
This repository does not have a README...
powerglot
Powerglot Powerglot encodes several kind of scripts using polyglots, for example, offensive powershell scripts. It is not needed a loader to run the payload. In red-team exercises or offensive tasks, masking of payloads is usually done by using steganography, especially to avoid network level...
Heartexploit
Heartexploit Here is my new first exploit, this exploit attacks the HeartBleed vulnerability CVE-2014-0160, I hope you like it. This exploit only works on linux since part of it is made in languages not compatible with windows. The only command needed to start this application is: ./Heartexploit....