CVE-2025-11833-PoC

CVE-2025-11833 Checker python3 main.py --url http://localhost --username admin --loot This repository is for educational and research purposes only. The author does not take responsibility for any misuse. Always test PoCs in a controlled and isolated environment...

zeek-gozi-detector

Gozi Malware Detector This Zeek packages detects Gozi banking malware activity. Resources: The RAR files this package looks for were discussed in the following articles: https://unit42.paloaltonetworks.com/march-wireshark-gozi-answers/...

webpwn3r

webpwn3r This project is not maintained for years, and was written when I started learning Python, but still people likes it :D. it only supports python2.7 WebPwn3r - Web Applications Security Scanner. By Ebrahim Hegazy - @Zigoo0 Thanks: @lnxg33k, @dia2diab @Aelhemily, @okamalo Please send all yo...

rustbuster

rustbuster A Comprehensive Web Fuzzer and Content Discovery Tool Introduction Check the blog post: Introducing Rustbuster — A Comprehensive Web Fuzzer and Content Discovery Tool Download You can download prebuilt binaries from here. Installation installrustbuster echo "Installing latest version o...

CVE-2024-4956

CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Repository Manager 3 The Nexus Repository Manager is a repository manager that organizes, stores, and distributes artifacts needed for development. A path traversal vulnerability has been discovered in Nexus Repository 3, in versions prior t...

s3dns

S3DNS s3dns is a lightweight DNS server that helps uncover cloud storage buckets AWS S3, Google Cloud Storage, and Azure Blob by resolving DNS requests, tracing CNAMEs, and matching known bucket URL patterns. It's a handy companion for pentesters , bug bounty hunters , and cloud security analysts...

CVE-2024-27564

CVE-2024-27564 Description: A vulnerability in pictureproxy.php allows remote attackers to perform arbitrary requests by injecting URLs into the url parameter. This SSRF vulnerability can be exploited without authentication, making it particularly dangerous. The vulnerable code is in the...

CVE-2021-24917

Exploit for CVE-2021-24917...

CVE-2022-40317

CVE-2022-40317 Stored XSS in Notes A stored XSS was found in the notes section of the application while we were pentesting a client that was using OpenKM. Basically, when storing notes, somehow normal HTML was allowed and it was rendered as is. As you know, However, we found that using...

CVE-2017-16568

CVE-2017-16568 1. Exploit Title: Logitech Media Server : HTML code injection and execution. 2. Shodan Dork: Search Logitech Media Server 3. Date: 11/03/2017 4. Exploit Author: Dewank Pant 5. Vendor Homepage: www.logitech.com 6. Version: 7.9.0 7. Tested on: Windows 10, Linux POC: 1. Access and go ...

url-regex-safe

url-regex-safe Regular expression matching for URL's. Maintained, safe, and browser-friendly version of url-regex. Resolves CVE-2020-7661cve for Node.js servers. Works in Node v14+ and browsers. Maintained for Spam Scannerspam-scanner and Forward Emailforward-email. Table of Contents Foreword...

fuzzdb

FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses...

Apkatshu

Apkatshu Apkatshu its a Tool for extracting urls , emails , ip address , and interesting data from APK files Apkatshu : tool written in bash/python for extracting urls, emails, ip addresses, and interesting data from APK files. The user can choose either JADX or APKTOOL for de-compilation. USAGE ...

CanaryTokenScanner

CanaryToken / HoneyToken Scanner Detect suspicious URLs including CanaryTokens inside Microsoft Office documents and PDFs. Supported formats: Office Open XML: .docx, .xlsx, .pptx .pdf .zip generic archives Why this exists CanaryTokens an HoneyTokens and other tracking or malicious URLs are often...

deadfinder

Find dead-links broken links Documentation • Installation • Github Action • Contributing • Changelog Dead link broken link means a link within a web page that cannot be connected. These links can have a negative impact to SEO and Security. This tool makes it easy to identify and modify. Looking f...

cve-2025-4664

CVE-2025-4664 This repository contains a PoC for exploiting CVE-2025-4664, a vulnerability where Chromium-based browsers leak sensitive URL parameters through Link header preload requests. Resources For a detailed explanation of how this exploit works, read the blog post:...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

POC_CVE-2025-53558

CVE-2025-53558 Disclaimer This program should only be used for authorized security testing and research purposes. Users must comply with the Cybersecurity Law and use it appropriately. The author is not responsible for any illegal attacks or other unlawful acts that occur when users use this tool...

crawlergo

crawlergo A powerful browser crawler for web vulnerability scanners English Document | 中文文档 crawlergo is a browser crawler that uses chrome headless mode for URL collection. It hooks key positions of the whole web page with DOM rendering stage, automatically fills and submits forms, with...

CVE-2022-22947

Added two types of reverse shell and network egress detection based on Wang Zheng's code. If any module is missing at runtime, just use pip to download that module. Enter the suspicious URL address. Note: Do not include '/' after the port. 1. First check if the vulnerability exists By default, th...