CrackAVFee

CVE 2022 3368 Vulnerability in Software Update Discovered by: @Wh04m1001 - @pxcs https://github.com/Wh04m1001/CVE-2022-3368 Educational purposes only!...

cngo

cngo v1 Fast Golang Tool take a filename with domains and get cname for every domain s Install $ go get -u github.com/yghonem14/cngo Basic Usage cngo accepts only text files: $ cngo -f /targets/spotify.txt creativeservice.spotify.com - creativeservicespotify.s3.amazonaws.com crashdump.spotify.com...

hoppr-cop

Hoppr-Cop For Policing Your SBOM Vulnerabilities Hoppr Cop is a cli and python library that generates high quality vulnerability information from a cyclone-dx Software Bill of Materials SBOM by aggregating data from multiple vulnerability databases. This project is offered as part of the hoppr...

sliver-tor-bridge

sliver-tor-bridge tor-based transport bridge for sliver c2. creates a hidden service and proxies traffic to your sliver server so your real ip is never exposed. what it does sets up a tor hidden service that points to a local http proxy. the proxy forwards everything to sliver's https listener...

ExpStruts

ExpStruts ExpStruts is a php-based mass exploiter for CVE-2017-5638 .. Screenshots ⚠️ Requirements Python3 for MakMan's Google Scraper Abk Khan @asystolik...

SuperDiagnosticTool

SuperDiagnosticTool AI-Powered Windows Diagnostic & Self-Healing Tool SuperDiagnosticTool is an intelligent system diagnostic utility that combines real-time hardware telemetry with Google Gemini AI to analyze, diagnose, and automatically remediate Windows system issues. Built with a safety-first...

CVE-2021-34473-Exchange-ProxyShell

python sendwebshellmail.py https://mail16.echod.com [email protected] Single retrieval python sendwebshellmail.py https://mail16.echod.com crack Batch read emails from mail.txt and attempt to obtain SID tokens python sendwebshellmail.py https://mail16.echod.com [email protected] send on...

DamnVulnerableCryptoApp

Why? If you try to learn a little bit more about crypto, either because you want to know how the attacks work or just because you want to do safe code, you end up diving really fast into the math behind the algorithms, and for a lot of people this is a NO. This project was creat...

CVE-2019-9053

CVE-2019-9053 💻 -h3x0v3rl0rd-...

appinfo-standalone

Ported UACME method 59 into standalone .C Youtube video demonstration: https://www.youtube.com/watch?v=UZdfh5RtR0&lc=UgxWnzgQ0x2KZBZIq6V4AaABAg...

redis-cve-2026-23479-scanner

CVE-2026-23479 Scanner Redis Use-After-Free vulnerability CVE-2026-23479 detection tool. Automatically checks Redis instances for vulnerability, misconfigurations, and exposure risks. Affected Versions Branch| Affected| Fixed ---|---|--- 7.2.x| 7.2.0 - 7.2.13| 7.2.14 7.4.x| 7.4.0 - 7.4.8| 7.4.9...

njutils

njutils ./njclient.py 192.168.56.101 5552 -k "You won't find keylogs here" -u "5k1d d357r0y3r" -p "m41nfr4m3-3000" -f "TRACKING LOCATION - PREPARING DRONE STRIKE" -o "Mac OSX 9.9" Use njclient.py -K option to open your l33t ascii art upon successfully connecting. Example: ./njclient.py...

getsubdomain

getsubdomain Get subdomain list and check whether they are active or not by each response code. Using API by c99.nl Installation ▶ go install github.com/abaykan/getsubdomain@latest Put your APIKEY in /.config/c99.txt: ▶ echo "" /.config/c99.txt Usage Single Domain ▶ echo "kustirama.id" |...

SecureAI-Scan

SecureAI-Scan An offline scanner for the code that talks to LLMs, MCP servers, vector stores, and Agent Skills. It finds prompt injection, MCP command injection and path traversal, RAG data leaks, and poisoned skills, and it proves each finding with a source → sink trace through your real imports...

imposter

IMPOSTER A pentest tool used to attack windows clients on rogue networks. Current version Features Downgrade LDAP to NTLM authentication Fake initial steps of an domain controller to fool Network Location Awareness Servers DNS, CLDAP, LDAP Setup The current version have been tested on Kali Linux...

CVE-2020-14179

CVE-2020-14179 Scanner Sample scan ./CVE-2020-14179.pl -u jira.atlassian.com OR ./CVE-2020-14179.pl -u https://jira.atlassian.com List scan ./CVE-2020-14179.pl -l list.txt Show Options ./CVE-2020-14179.pl How to install and use linux git clone https://github.com/c0brabaghdad1/CVE-2020-14179.git c...

vulnknox

VulnKnoX VulnKnox is a powerful command-line tool written in Go that interfaces with the KNOXSS API. It automates the process of testing URLs for Cross-Site Scripting XSS vulnerabilities using the advanced capabilities of the KNOXSS engine. Features Supports pipe input for passing file lists and...

mapchar

Generate wordlists using pattern logic and expressions Installation • Documentation • Usage • Contributing !NOTE This project was renamed fromfuse / fuse-generator to mapchar starting from version 7.0.2. The PyPI package, CLI command, and Python package name have all changed accordingly. If you...

SnipRecover-CLI

SnipRecover CLI Detection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303 SnipRecover CLI is a minimal, dependency-free command-line utility designed to: Detect PNG files modified by the Windows Snipping Tool vulnerability CVE‑2023‑28303. Restore the original...

scopeblind-gateway

protect-mcp Fail-closed Cedar policy gate plus signed receipts for AI agent tool calls. protect-mcp is a gate that sits in front of an AI agent's tool calls. It evaluates each call against a Cedar policy, blocks what breaks the rules before it runs, and signs an offline-verifiable Ed25519 receipt...