naive-hashcat

Naive Hashcat Craquez des hachages de mots de passe sans prise de tête. Naive hashcat est un script plug-and-play préconfiguré avec des paramètres/types d'attaque naïfs, testés empiriquement et « suffisamment bons ». Lancez des attaques hashcat à l'aide de ./naive-hashcat.sh sans avoir besoin de...

CVE-2019-6690

Summary It is a simple PoC of Improper Input Validation in python-gnupg 0.4.3 CVE-2019-6690. Vulnerable python python-gnupg 0.4.3 python python-gnupg 0.3.6 python python-gnupg 0.3.5 python python-gnupg 0.3.4 Mitigation Users should upgrade to 0.4.4 Test Environment Docker Image docker pull...

cve-2022-4543-wrapper

cve-2022-4543-wrapper Introduction This is a wrapper of willsroot's CVE-2022-4543 exploit to help you judge and get kernel base address. How to use Compile Base on your demandOptional: gcc dekaslr.c --static -o dekaslr g++ main.cpp --static -o main For some OS, install static libc first. De-KASLR...

gofireprox

GoFireProx This is a port of FireProx to Golang Installation go install -v github.com/mr-pmillz/gofireprox/cmd/gofireprox@latest gofireprox as library Integrate gofireprox with other go programs package main import "fmt" "github.com/mr-pmillz/gofireprox" func main region := "us-east-1" fpClient,...

pylibemu

Pylibemu |version badge| |downloads badge| .. |version badge| image:: https://img.shields.io/pypi/v/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ .. |downloads badge| image:: https://img.shields.io/pypi/dm/pylibemu.svg :target: https://pypi.python.org/pypi/pylibemu/ Pylibemu هو غلا...

bluekeepscan

BlueKeepScan Simple wrapper over PoC from @zerosum0x0 for checking CVE-2019-0708 in large network in multithreading. Prepare First of all you shouldn download and install original: git clone https://github.com/zerosum0x0/CVE-2019-0708.git cd...

proxmark3-amiimicyou

Amiibo simulator instructions A copy of the amiitool Lua wrapper is included at client/libluamiibo.so, but if you want to build it yourself, follow these instructions: 1. Get the lua-lib branch of amiitool at https://github.com/jamchamb/amiitool/tree/lua-lib. 2. In CMakeLists.txt set PROXMARKLIBL...

autocrack

AUTOCRACK.py هذا النص البرمجي بلغة بايثون هو غلاف لـ Hashcat https://hashcat.net للمساعدة في أتمتة عملية الكسر. يتضمن النص البرمجي وظائف متعددة لاختيار مجموعة من قوائم الكلمات والقواعد، بالإضافة إلى القدرة على تشغيل هجوم القوة العمياء bruteforce بأقنعة مخصصة، قبل هجمات قوائم الكلمات/القواعد. يستخ...

rewrite-cve-2026-22732

rewrite-cve-2026-22732 OpenRewrite recipe that detects code susceptible to CVE-2026-22732, a Spring Security defect where setting Content-Length through one of three response methods bypasses Spring Security's OnCommittedResponseWrapper. Because the wrapper never sees the header,...

icicle-python

icicle-python This project is an easy-to-use Python wrapper around icicle-emu. You can read more about Icicle in the paper: Icicle: A Re-designed Emulator for Grey-Box Firmware Fuzzing. Installation You can install the latest release from PyPI: pip install icicle-emu Development Note : You need t...

ffufw

ffufw ffuf with that special sauce Install go install github.com/puzzlepeaches/ffufw@latest Why? ffufw is a wrapper around ffuf to make directory bruteforcing easier and more intelligent. The tool has the following features: Multithreaded execution of ffuf commands for a list of URLs Dynamic...

ssllabs.rb

ssllabs.rb Ruby gem for Qualys SSL Labs server test. API Notes All API objects described in the SSL Labs API docs are exposed as native ruby objects. Properties are accessed with "underscored" names, i.e. endpoint.hoststarttime will return the hostStartTime field from the API response. All boolea...

kadimus

kadimus Herramienta de Escaneo y Explotación LFI kadimus es una herramienta para verificar y explotar vulnerabilidades LFI, con un enfoque en sistemas PHP. Características: Verificar todos los parámetros de URL /var/log/auth.log RCE /proc/self/environ RCE php://input RCE data://text RCE...

super-xray

Super Xray Si este proyecto te ha sido útil, puedes darle una estrella para apoyar al autor. Introducción xray es una excelente herramienta de escaneo de vulnerabilidades, pero actualmente solo tiene versión de línea de comandos, se inicia mediante el archivo de configuración config.yaml, en much...

jfscan

!CAUTION ⚠️ Proyecto obsoleto Este proyecto ha sido reescrito en Go para un mejor rendimiento y funcionalidades. Usa la nueva versión aquí: nullt3r/massmap Descripción Características principales Desata el poder de Nmap con Masscan para escaneos a gran escala Escanea objetivos usando nombres de...

sleep_python_bridge

Cobalt Strike Sleep Python Bridge This project is 'bridge' between the sleep and python language. It allows the control of a Cobalt Strike teamserver through python without the need for the standard GUI client. NOTE: This project is very much in BETA. The goal is to provide a playground for testi...

Apache Solr <= 7.1 - XML Entity Injection

Apache Solr with Apache Lucene before 7.1 is susceptible to remote code execution by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external...

SilkETW

SilkETW y SilkService SilkETW y SilkService son envoltorios flexibles en C para ETW, diseñados para abstraer las complejidades de ETW y ofrecer a los usuarios una interfaz simple para realizar investigación e introspección. Aunque ambos proyectos tienen aplicaciones defensivas y ofensivas obvias,...

CVE-2018-7600

Proof-Of-Concept for CVE-2018-7600 / SA-CORE-2018-002 codebeat badge Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. H...

reachability

-- INICIO DEL DESCARGO -- ÚSELO BAJO SU PROPIO RIESGO – DE NINGUNA MANERA SOY RESPONSABLE POR CUALQUIER DAÑO OCURRIDO – SI NO TIENE PERMISO EXPLÍCITO DEL PROPIETARIO DE LA RED, NO Y REPITO NO EJECUTE ESTO ESTO ES PYTHON ENCAPSULANDO MASSCAN https://github.com/robertdavidgraham/masscan -- FIN DEL...