xss_vulnerability_challenges

XSS Vulnerability Scenarios challenges This repository is a Dockerized php application containing some XSS vulnerability challenges. The ideas behind challenges are: Javascript validation bypass html entities bypass WAF bypass Black-list validation bypass Basic XSS validation bypass Double encode...

CVE-2020-7961

This repository does not have a README...

CVE-2015-0235-workaround

CVE-2015-0235-workaround aka GHOST glibc vulnerability A shared library wrapper with additional checks for the vulnerable functions gethostbyname2r and gethostbynamer . The proper solution for CVE-2015-0235 is to upgrade glibc to at least glibc-2.18. In some cases, an immediate glibc upgrade is n...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

CVE-2021-21315

CVE-2021-21315...

CVE-2026-53075poc

CVE-2026-53075poc POC de CVE-2026-53075...

-CVE-2024-39930

CVE-2024-39930 Gogs bajo ataque: desentrañando la vulnerabilidad crítica de SSH CVE-2024–39930...

Vm4J

Vm4J Una herramienta para detectar la vulnerabilidad log4j en productos VMware. ¿Cómo funciona? Primero, inicia un servidor JNDIExploit. Inicia esta herramienta y configura los ajustes correctamente. Envía el payload. Captura de pantalla Soporte VMware HCX VMware vCenter VMware Workspace One Se...

CVE-2021-40444-Sample

CVE-2021-40444-Sample CVE-2021-40444 Muestra...

vscan

vscan vulnerability scanner tool is using nmap and nse scripts to find vulnerabilities This tool puts an additional value into vulnerability scanning with nmap. It uses NSE scripts which can add flexibility in terms of vulnerability detection and exploitation. Below there are some of the features...

CVE-2021-21973-Automateme

CVE-2021-21973-Automateme automate me!...

CVE-2023-38646

...

trivy

📖 Documentación Trivy pronunciación es un escáner de seguridad integral y versátil. Trivy tiene escáneres que buscan problemas de seguridad, y objetivos donde puede encontrar esos problemas. Objetivos qué puede escanear Trivy: Imagen de contenedor...

openapi_security_scanner

OpenAPI Security Scanner About The Project Authorization security issues in modern web applications could not be easily picked up by security scanners. A few examples from Shopify, LINE, NordVPN. One of the reasons is that the security scanners mainly looking for SQLi, XSS, RCE instead of looking...

letsploit

letsploit letsploit is a tool that detects the patch level of the local or another windows 10 system, checks it against the latest available patches and finds potential cve vulnerabilities as well as publicly available exploit code. Inspired by following projects 1. bitsadmin's WESNG...

frameworks_base_CVE-2023-20943

This repository does not have a README...

aioScan_CVE-2020-0796

aioScanCVE-2020-0796 Preface Based on the public POC, using coroutines greatly improves detection speed, making it convenient for operations colleagues to quickly scan the internal network. Affected Versions root@kitploit: Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1903 for...

wpbullet

wpBullet 一个针对 WordPress 插件/主题（以及 PHP）的静态代码分析工具 安装 只需克隆仓库，安装依赖并运行脚本 $ git clone https://github.com/webarx-security/wpbullet wpbullet $ cd wpbullet $ pip install -r requirements.txt $ python wpbullet.py 使用 可用选项： root@kitploit: --path 必填 系统路径或下载 URL 示例： --path="/path/to/plugin"...

Dorkify

Perform Google Dork search with Dorkify Google Dorking Google dorking is a hacker technique that uses Google Search to find security holes in the configuration and computer code that websites use. Google Dorking involves using advanced operators in the Google search engine to locate specific...

003Recon

📌 Description This repository contains some of my scripts that i created to automate some recon processes. It performs the following things; 1. Get subdomains of a domain 2. Filter out only online domains 3. Scan the domains for CRLF 4. Check for a CORS misconfigurations 5. Test for open redirect...