dismap

🌀 Dismap - Asset discovery and identification tool 中文 Readme Dismap positioning is an asset discovery and identification tool. It can quickly identify protocols and fingerprint information such as web/tcp/udp, locate asset types, and is suitable for internal and external networks. It assists red...

CVE-2023-22515

CVE-2023-22515 Exploit Script Affected versions 8.0.0=Atlassian Confluence=8.5.1 Vulnerability Exploitation python3 CVE-2023-22515.py -h usage: confluence.py -h -url URL optional arguments: -h, --help show this help message and exit -url URL url：http://xx.xx.xx.xx...

GeoServerExploit

GeoServerExploit A vulnerability exploitation tool for GeoServer CVE-2024-36401/CVE-2024-36404 This project was jointly developed by @hony and @wh!te?be6ar. If you find this project helpful, please don't forget to give it a 🌟Star to show your support. Thank you. Usage Example Acknowledgements...

iot-vuln-lab-cve-2017-17761

iot-vuln-lab-cve-2017-17761 Educational simulation of vulnerability exploitation in IoT devices based on CVE-2017-17761...

pocs

pocs we will release pocs in this repo all bugs in this repo are responsibly disclosed...

cve-2021-46422

Installation git clone https://github.com/CJ-0107/cve-2021-46422 cd cve-2021-46422 Usage This tool is a PoC written according to the development specifications of the pocsuite3 framework. Please download pocsuite3 before use. Project address https://github.com/knownsec/pocsuite3 Environment Pytho...

vsaudit

vsaudit This is an opensource tool to perform attacks to general voip services It allows to scans the whole network or single host to do the gathering phase, then it is able to search for most known vulnerabilities on the founds alive hosts and try to exploit them. Install dependencies To start...

py-CVE-2021-41773

CVE-2021-41773 Python语言poc&exp项目。 声明：该项目来自作者日常学习笔记。 请勿利用相关技术以及工具从事非法测试，如因此产生的一切不良后果作者无关。 使用： python main.py -h 查看帮助 python main.py -u 利用漏洞 python main.py -f url.txt 批量测试漏洞是否存在 python main.py -f url.txt -o bug.txt 批量测试漏洞是否存在,存在的写入bug.txt中...

Masterchef

Masterchef Framework 👨‍🍳 The most delicious pentesting tool 👩‍🍳 Under development... Masterchef is a graphical vulnerability exploitation and validation tool that helps you break down your penetration testing workflow by creating tasty recipes. It is the ideal tool for getting started in the world...

hacktivity-vulns-exploits-lab

Vulnerabilities, Exploits, and Remote Access Payloads — lab writeup My walkthrough and analysis of the Hacktivity Cyber Security Labs sheet "Vulnerabilities, Exploits, and Remote Access Payloads" Ethical Hacking and Penetration Testing course, Leeds Beckett University. It covers how software...

Android-vulnerability-exploitation

Android-vulnerability-exploitation Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because I didn't know two people could do the same thing And then Having learned of this, ...

vulnerability-exploitation

vulnerability-exploitation Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287/Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because ...

Antecursor

Antecursor The Antecursor Project is an open-source and open-hardware project created by infosec students with the goal of developing an autonomous and modular system for network based information gathering and exploitation. Audience Antecursor is intended to help BOTH blue team and red team and...

CVE-2025-55182

CVE-2025-55182 POC This repository contains a proof of concept POC for CVE-2025-55182, demonstrating the vulnerability and its exploitation. Weak server "dependencies": "next": "16.0.6", "react": "19.2.0", "react-dom": "19.2.0" , Weak server 2 "dependencies": "next": "^15.0.0", "react": "^19.0.0"...

ExploitWebmin

Script Webmin Project created by: Gabriel Jose. Python script to exploit webmin vulnerability cve-2006-3392 Example of how to use ./exploitWebmin.py -pt http -t host -p port -f file ./exploitWebmin.py -pt http -t 127.0.0.1 -p 10000 -f /etc/passwd...

fscan

Fscan English Herramienta integral de escaneo de redes internas, escaneo automatizado de vulnerabilidades con un solo clic. Versión : 2.2.2 Características Capacidades de escaneo Descubrimiento de hosts - Detección de supervivencia ICMP/Ping, soporta estadísticas de supervivencia en segmentos de...

CVE-research

CVE-research A repository that contains all the working PoC I have crafted for known CVEs, and details on any ongoing research I am currently doing mostly Iot devices Note on working PoC exploit scripts/payloads 1. Use the exploit scripts ethically and responsibly! I will not be responsible for a...

CVE-2026-24118

⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in controlled...

mole

Mole Un framework para identificar y explotar vulnerabilidades fuera de banda OOB. Instalación y Configuración Instalación de Mole Python = 3.6 virtualenv -p /usr/bin/python3 venv source venv/bin/activate ./venv/bin/pip3 install -r requirements.txt git submodule update --init --recursive Establec...

posta

Posta Posta es una herramienta para investigar la comunicación de Mensajería entre Documentos Cross-document Messaging. Permite rastrear, explorar y explotar vulnerabilidades de postMessage, e incluye funciones como la reproducción de mensajes enviados entre ventanas dentro de cualquier navegador...