vuls

Vuls: Escáner de Vulnerabilidades Escáner de vulnerabilidades para Linux/FreeBSD, sin agente, escrito en Go. Twitter: @vulsen...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen...

dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

cve-2021-6901

cve-2021-6901 readme...

frameworks_opt_net_wifi_CVE-2021-0390

Este repositorio no tiene un README...

MIDA-Multitool

MIDA - Multitool Script Bash diseñado para enumeración del sistema, identificación de vulnerabilidades y escalada de privilegios. MIDA Multitool extrae funcionalidad de varios de mis scripts anteriores, concretamente SysEnum y RootHelper y, en cierto modo, es el sucesor de RootHelper, o al menos ...

security-advisories

security-advisories Avisos de seguridad públicos publicados por Me Chidubem Chukwu Terminal Venom, incluyendo divulgaciones de CVE e informes de vulnerabilidades para software de código abierto y de terceros...

py-CVE-2021-41773

CVE-2021-41773 Python语言poc&exp项目。 声明：该项目来自作者日常学习笔记。 请勿利用相关技术以及工具从事非法测试，如因此产生的一切不良后果作者无关。 使用： python main.py -h 查看帮助 python main.py -u 利用漏洞 python main.py -f url.txt 批量测试漏洞是否存在 python main.py -f url.txt -o bug.txt 批量测试漏洞是否存在,存在的写入bug.txt中...

ProxyVulns

ProxyVulns ProxyLogon Usage: python3 26855.py 1.1.1.1 ProxyOracle root@kitploit: Once a victim clicks this link, evil.com will receive the cookies...

CVE-2025-55182-Typescript

Links https://github.com/msanft/CVE-2025-55182 https://nextjs.org/blog/CVE-2025-66478 https://vercel.com/changelog/cve-2025-55182 https://www.reddit.com/r/reactjs/comments/1pd8kxu/criticalvulnerabilitiesinreactandnextjs/...

CVE-2018-6389-FIX

Este repositorio no tiene un README...

concealed_position

Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...

uro

uro Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: incremental urls e.g. /page/1/ and /page/2/ blog posts and similar human written conten...

git-vuln-finder

git-vuln-finder Encontrando posibles vulnerabilidades de software a partir de mensajes de confirmación de git. El formato de salida es un JSON con la confirmación asociada que podría contener una corrección relacionada con una vulnerabilidad de software. La búsqueda se basa en un conjunto de...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

CVE-2025-68613_Scanner

n8n CVE-2025-68613 Internet Scanner A Tkinter-based GUI tool to discover publicly exposed n8n instances via Shodan and test them for exposure to CVE‑2025‑68613 across a wide version range. The scanner: Queries Shodan with multiple fingerprints title, HTML markers, favicons, cloud orgs to find...

fortiscan

Fortiscan CVE-2018-13379 FG-IR-18-384 Exploitation Tool, You can use this tool to check the vulnerability in your FortiGate SSL-VPN. This vulnerability affects the following versions: • FortiOS 6.0 - 6.0.0 to 6.0.4 • FortiOS 5.6 - 5.6.3 to 5.6.7 • FortiOS 5.4 - 5.4.6 to 5.4.12...

web-hacking-playground

Web Hacking Playground Descripción Web Hacking Playground es un entorno controlado de hacking web. Consta de vulnerabilidades encontradas en casos reales, tanto en pentests como en programas de Bug Bounty. El objetivo es que los usuarios puedan practicar con ellas, y aprender a detectarlas y...

003Recon

📌 Descripción Este repositorio contiene algunos de mis scripts que creé para automatizar algunos procesos de reconocimiento. Realiza lo siguiente; 1. Obtener subdominios de un dominio 2. Filtrar solo los dominios en línea 3. Escanear los dominios en busca de CRLF 4. Verificar configuraciones...