jexboss

JexBoss - JBoss and others Java Deserialization Vulnerabilities verify and EXploitation Tool JexBoss is a tool for testing and exploiting vulnerabilities in JBoss Application Server and others Java Platforms, Frameworks, Applications, etc. Requirements Python = 2.7.x urllib3 ipaddress Installatio...

CVE-2024-3400

CVE-2024-3400 Author: wa6n3r | GitHub | Web Description Tool for automated exploitation of the CVE-2024-3400 vulnerability in Palo Alto Networks PAN-OS devices. Supports multithreaded scanning, automatic artifact download, and detailed logging. !!!Important : Use only on systems for which you hav...

CVE-2021-39165

CVE-2021-39165 This Python script allows to exploit CVE-2021-39165 in Cachet prior to and including 2.3.18 automatically. References : https://github.com/fiveai/Cachet/security/advisories/GHSA-79mg-4w23-4fqc https://nvd.nist.gov/vuln/detail/CVE-2021-39165...

CVE-2023-4220

RCE for Chamilo LMS CVE-2023-4220 Using a Web Shell This project automates the exploitation of the remote code execution vulnerability CVE-2023-4220 found in Chamilo LMS. Using a web shell, the tool facilitates the automated exploitation of the vulnerability to gain control over affected Chamilo...

oracle-xxe-sqli

oracle-xxe-sqli Automated Oracle CVE-2014-6577 exploitation via SQLi Usage: oracle-xxe-sqli.py -h -i IP -p PORT --disable-server --custom-headers CUSTOMHEADERS -f PAYLOADFILE url Options positional arguments: url URL to inject. Use as the injection marker, just once. optional arguments: -h, --hel...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

metateta

Metateta Metateta Automated Tool For Scanning And Exploiting Network Protocols Using Metasploit For faster pen testing for large networks What You Can Do Scanning with all metasploit modules for specific network Protocol like smb,smtp,snmp Run all Auxiliary modules against specific network Protoc...

harbor

Team Introduction Chongqing Jiugongge Security Team is committed to sharing open-source security tools, with research directions covering red-blue confrontation, Web security, mobile security, security development, enterprise security construction, IoT/Industrial Control Security/AI/Quantum...

nodexp

NodeXP - Node.js サービス向け検出・悪用ツール! NodeXP は Python 2.7 で書かれた統合ツールであり、ServerSideJavascriptInjection 攻撃に基づいて、Node.js サービス上の潜在的な脆弱性を検出 し、自動的に悪用 することができます。 はじめに - インストールと使用方法 Git リポジトリをクローンして NodeXP をダウンロードします: git clone https://github.com/esmog/nodexp すべてのオプションのリストを表示するには、以下を実行します: python2.7 nodexp -h...

Mass-Assigner

Mass Assigner Mass Assigner는 웹 애플리케이션에서 대량 할당Mass Assignment 취약점을 식별하고 악용하기 위해 설계된 강력한 도구입니다. 먼저 지정된 요청예: 사용자 프로필 데이터 가져오기에서 데이터를 검색합니다. 그런 다음 응답에서 추출된 각 매개변수를 제공된 두 번째 요청에 한 번에 하나씩 체계적으로 적용하려고 시도합니다. 이 접근 방식을 통해 잠재적인 대량 할당 취약점을 자동으로 테스트하고 악용할 수 있습니다. ⚠️ 면책 조항 이 도구는 서버 측 데이터를 적극적으로 수정합니다. 사용 전에 적절...

CVE-2023-4220

autopwn...

WIndows-7-automated-exploitation-using-metasploit-framework-

This repository does not have a README...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS Privilege Escalation This repository contains a Python script that automates the exploitation of the CVE-2025-2304 privilege escalation vulnerability in Camaleon CMS. It has been tested on version 2.9.0. Usage python exp.py http://target.exmaple user password123 Links...

shannon v3.1.0

!NOTE Shannon 3.0 is live: deeper security code analysis, more thoroughly vetted findings, a rebuilt CLI, native CI/CD, professional PDF reports, and SARIF. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths, and executes re...

Exploit for CVE-2026-10795

CVE-2026-10795 UpdraftPlus Auto-Exploit & Mass Scanner Au...

PT-2026-46364

Unauthenticated Local File Inclusion in Gita = 1.11 versions...

PT-2026-46376

Unauthenticated Local File Inclusion in Tipsy = 1.1 versions...

PT-2026-46326

Unauthenticated Local File Inclusion in Raider Spirit = 1.1.2 versions...

PT-2026-46371

Unauthenticated Local File Inclusion in Eros = 1.3 versions...

📄 WordPress AI Engine 3.1.3 Mass Enumeration

This advisory documents a fully automated PHP-based exploitation framework designed to perform mass enumeration, plugin detection, token extraction, and automated account creation targeting vulnerable WordPress MCP-related REST API endpoints...