CVE-2019-19609

CVE-2019-19609 Strapi = 3.0.0-beta.17.8 authenticated remote code execution...

ictf-framework

The iCTF Framework 3.0 This is the framework that Shellphish uses to host the iCTF. The iCTF Framework is described in a paper presented at the Usenix 3GSE workshop in 2014. We released this in the hope that it allows educators and trainers to host their own A/D CTFs. This framework is free for...

CVE-2020-11444

CVE-2020-11444 Nexus 3 Unauthorized Access Exploit Script For more exploit scripts, see: https://github.com/zhzyker/exphub Readme +-----------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...

OpenCLAW-P2P

P2PCLAW - Decentralized Autonomous Research Collective P2PCLAW is a decentralized research network where AI agents and human researchers publish, validate, preserve, and evaluate scientific work through open infrastructure. Latest public paper: arXiv:2604.19792, currently revised as OpenCLAW-P2P...

CVE-2019-18818

CVE-2019-18818 Strapi = 3.0.0-beta exploit POC...

Empire-GUI

Empire GUI The Empire Multiuser GUI is a graphical interface to the Empire post-exploitation Framework. It was written in Electron and utilizes websockets SocketIO on the backend to support multiuser interaction. The main goal of this project is to enable red teams, or any other color team, to wo...

drozer

drozer drozer is a security testing framework for Android. drozer allows you to search for security vulnerabilities in apps and devices by assuming the role of an app and interacting with the Android Runtime, other apps' IPC endpoints and the underlying OS. drozer provides tools to help you use,...

BugBuntu

BugBuntu Linux v0.1.2 Hello, this is our first alphabeta test version of BugBuntu This little project is based on Tips from King of Bug Bounty repository BugBuntu is a customized distro based on Ubuntu 18.04 and focused on Bug Bounty tools. Some installed tools: Amass Anew Anti-burl Assetfinder...

WhatsDump

Rewriting entire project. WIP WhatsDump Extract WhatsApp private key from any Android device Android 7+ supported. This tool spawns a clean Android 6 emulator and attempts to register with your number to extract msgstore private key. NOTE: this tool is in beta stage and might not be stable. You'r...

link

link link is a command and control framework written in rust. Currently in beta. Table of Contents Introduction Features Feedback Build Process Acknowledgments Introduction link provides MacOS, Linux and Windows implants which may lack the necessary evasive tradecraft provided by other more matur...

Xerror

Xerror Xerror is an automated penetration tool , which will help security professionals and non professionals to automate their pentesting tasks. Xerror will perform all tests and, at the end generate two reports for executives and analysts. Xerror provides GUI easy to use menu driven...

bbrecon

This project is no longer maintained and I took the crawling infrastructure offline. The audience was not big enough to justify maintaining it. Bug Bounty Recon bbrecon is a free Recon-as-a-Service for bug bounty hunters and security researchers. The API aims to provide a continuously up-to-date...

CHAOS

CHAOS: Remote Administration Tool CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems. Report bug · Request feature · Quick start · Screenshots Disclaimer THIS SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. YOU MA...

CVE-2019-19609-EXPLOIT

CVE-2019-19609-EXPLOIT Exploit for CVE-2019-19609 in Strapi Remote code execution in strapi-3.0.0-beta.17.7 or earlier. I was faced with a scenario with this vulnerability, but without a public exploit. I decided to create my own and share it here. Instalation git clone...

Paste2Web

Paste2Web - бета-версия Скрипт на python3, который использует сайт cl1p для отправки и получения секретных сообщений Как это работает ? -При отправке сообщение разбивается на слова, затем генерируется случайное слово , и оно используется для публикации каждого слова отдельно в ссылке, а вам...

Exif-Grabber

О Exif Grabber Бета-версия Exif Grabber — это python-инструмент, предназначенный для извлечения exif-данных из изображений двумя методами Скриншот Скриншот, показывающий часть его работы Требования Библиотека Exifread: https://pypi.python.org/pypi/ExifRead Установка $ git clone...

heimdall_webserver

ATTENTION, ce projet est en version bêta, il y a beaucoup de bugs et de problèmes, si vous voulez aider le projet, utilisez-le dans un laboratoire, pas dans votre environnement réel. NON, le HTTPS n'est pas encore implémenté, il viendra dans la prochaine mise à jour Heimdall C'est un outil pour...

zap-hud

ZAP Affichage Tête Haute Le HUD n'est plus en développement actif Malheureusement, le HUD n'est plus en développement actif car personne ne s'y consacre. Le HUD est une interface unique et innovante que certaines personnes adorent, nous le savons. Mais il nécessite également une maintenance non...

jok3r

.. raw:: html .. image:: ./pictures/logo.png .. raw:: html Jok3r v3 beta .. image:: https://img.shields.io/badge/python-3.6-blue.svg :target: https://www.python.org/downloads/release/python-366/ :alt: Python 3.6 .. image:: https://readthedocs.org/projects/jok3r/badge/?version=latest :target:...

Endurance-Wiper

Endurance-Wiper Beta — с открытым исходным кодом Небольшая вредоносная программа-вайпер, написанная на C с использованием .NET Framework. Если вы пришли из Twitter или любого другого источника, вы можете ясно видеть, что разработка активно ведётся. Вы можете свободно следить за обновлениями здесь...