123396 matches found
CVE-2024-0235
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-0235 Run bellow command to check CVE-2024-0235 -h Configurations 2. We integrated with the Telegram API to receive...
CVE-2019-9670
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2019-9670 Run bellow command to check CVE-2019-9670 -h Configurations 2. We integrated with the Telegram API to receive...
fuzzuli
fuzzuli Motivation β’ Background β’ Installation β’ Usage β’ Running fuzzuli β’ Tool Page fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain. Motivation In my application security testing journey that i have been doing for years, i...
ProxyShell
ProxyShell CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability. This faulty URL normalization lets us access an arbitrary backend URL while running as the Exchange Server machine account. Although this bug is not as powerful as the SSRF in ProxyLogon, and w...
CVE-2026-20841
π‘οΈ CVE-2026-20841 - Windows Notepad Security Test Tool β οΈ What is CVE-2026-20841? CVE-2026-20841 is a known security weakness in the Windows Notepad application. It affects the markdown feature, which lets Notepad display formatted text with clickable links. This weakness happens because the...
Deathnote
Deathnote Proof of Concept of CVE-2022-30190 A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling...
IOCScraper
IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...
TekDefense-Automater
TekDefense-Automater Version: 0.21 http://www.tekdefense.com/automater/ http://www.tekdefense.com/news/2013/12/4/finally-the-new-automater-release-is-out.html Automater is a tool that I originally created to automate the OSINT analysis of IP addresses. It quickly grew and became a tool to do...
CVE-2023-27163-lab
CVE-2023-27163 β Request-Baskets SSRF Lab Project: Vulnerability Research & Reproduction Lab β CVE-2023-27163 Author: Amulya Kaushik Role: Cybersecurity R&D & Lab Content Development Intern Candidate Server-Side Request Forgery in Request-Baskets β€ 1.2.1 A self-contained local research lab for...
Zeus-Scanner
Annuaire des liens utiles Qu'estce que Zeus Les caractΓ©ristiques de Zeus Exigences et installation Ubuntu/Debian centOS autre CapturesΓ©cran vidΓ©o Demo manuel d'utilisation Comment fonctionne Zeus FonctionnalitΓ© Passant drapeaux sqlmap avec Zeus Informations lΓ©gales Licence GPL Code de conduite...
Firebase-Extractor
Firebase-Extractor //Mobile OSINT// This tool is written in python2, the purpose of this tool is to parse all the results from Bing search.Basically whenever a firebaseio URL is found for an app , User instead of searching for sensitive data by going manually through the search results can use th...
CVE-2025-61456
π‘οΈ CVE Disclosure: CVE-2025-61456 β Reflected XSS in E-commerce Project Disclosure Date: 14 October 2025 CVE ID: CVE-2025-61456 Severity: MEDIUM CVSS 6.1 𧩠Summary A reflected Cross-Site Scripting XSS vulnerability exists in the E-commerce Project v1.0, specifically within the index.php endpoint...
CVE-2021-24006
CVE-2021-24006 β FortiManager Improper Access Control Exploit PoC PoC Proof of Concept - Educational Use Only Exploit for improper access to SD-WAN Orchestrator in FortiManager, exploiting an access control flaw CWE-284. Description The vulnerability CVE-2021-24006 affects FortiManager versions...
endext
EndExt EndExt is a .go tool for extracting all the possible endpoints from the JS files Idea When you crawll all the JS files from waybackruls for example, or even collecting the JS files urls from your target website's home source page .. If the website was using API system and you wanna look fo...
CVE-2023-26256
CVE-2023-26256 -h get help -u run a single URL -f batch run...
wordlistgen
wordlistgen What and why? wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, quer...
cve-2025-24514
π₯ CVE-2025-24514 Remote Vulnerability Check PoC This script is a Python-based PoC that can remotely check for the CVE-2025-24514 vulnerability NGINX configuration manipulation and potential RCE through auth-url injection in ingress-nginx. π§ Vulnerability Overview CVE-2025-24514 is a vulnerability...
CVE-2017-8759
CVE-2017-8759 This repo contains sample exploits for CVE-2017-8759 for Microsoft PowerPoint, along with a description of how similar vulnerabilities were, and can, be exploited using the same techniques. Some background The aim of publishing this repo is to highlight alternative exploitation...
CVE-2024-9933
CVE-2024-9933 Usage Usage: python CVE-2024-9933 .py option URL Options: check : Verify if the target URL is vulnerable. exploit : Attempt to exploit the vulnerability on the provided URL. Examples: python CVE-2024-9933 .py check http://example.com python CVE-2024-9933 .py exploit http://example.c...
revshellgen
π RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features β’ Installation β’ Usage β’ Shell Types β’ Contributing π About RevShellGen is a powerful command-line tool that simplifies the process of generati...