CVE-2019-18818

CVE-2019-18818 Strapi = 3.0.0-beta exploit POC...

ictf-framework

The iCTF Framework 3.0 This is the framework that Shellphish uses to host the iCTF. The iCTF Framework is described in a paper presented at the Usenix 3GSE workshop in 2014. We released this in the hope that it allows educators and trainers to host their own A/D CTFs. This framework is free for...

CVE-2019-19609-EXPLOIT

CVE-2019-19609-EXPLOIT Exploit for CVE-2019-19609 in Strapi Remote code execution in strapi-3.0.0-beta.17.7 or earlier. I was faced with a scenario with this vulnerability, but without a public exploit. I decided to create my own and share it here. Instalation git clone...

CVE-2020-0688-GUI

一、Project Purpose and Reference The purpose is simple: I'm planning to write a C2 in C again recently, so let's first write some small tools to practice and increase interest. So I thought of turning zcgonvh's tool into a GUI. The source tool link is as follows:...

Paste2Web

Paste2Web - beta version A python3 script that uses cl1p website to send and receive secret messages How does it work ? -On sending it spliting the message to words then generates a random word and uses it in posting every word alone in a link and gives you a key -Now to receive you should contac...

ASST

ASST BETA OWASP ASST Automated Software Security Toolkit | A Novel Open Source Web Security Scanner. Note: AWSS is the older name of ASST Introduction Web applications have become an integral part of everyday life, but many of these applications are deployed with critical vulnerabilities that can...

LAMMA-beta

LAMMA BETA Vulnerability Assessment Framework for all the Crypto Implimentations. An Open Source Initiative by - SECURITY MONX Lamma Framework Documentation beta File Name : README Author : @ajithatti Org : Security Monx Version : 0.0.1 Purpose : Gives introduction of Lamma Framework beta Table O...

Exif-Grabber

About Exif Grabber Beta Version Exif Grabber is a python tool designed to extract exif data from picture with two methods Screenshot Screenshot showing a part of it working Requirement Exifread library :https://pypi.python.org/pypi/ExifRead Installation $ git clone...

CVE-2019-19609

Strapi CMS Exploit This exploit targets two vulnerabilities in the Strapi CMS Framework version 3.0.0-beta-17.4 allowing for unauthenticated remote code execution RCE. Vulnerabilities CVE-2019-18818 Weak Password Recovery Mechanism for Forgotten Password CVSS : 9.8 - Critical More details:...

Xerror

Xerror Xerror is an automated penetration tool , which will help security professionals and non professionals to automate their pentesting tasks. Xerror will perform all tests and, at the end generate two reports for executives and analysts. Xerror provides GUI easy to use menu driven...

CVE-2019-19609

CVE-2019-19609 Strapi = 3.0.0-beta.17.8 authenticated remote code execution...

Invoke-ATTACKAPI

Invoke-ATTACKAPI DEPRECATED WE RECOMMEND TO USE: https://github.com/Cyb3rWard0g/ATTACK-Python-Client A PowerShell script to interact with the MITRE ATT&CK Framework via its own API in order to gather information about techniques, tactics, groups, software and references provided by the MITRE ATT&...

msploitego

msploitego - El conjunto de pentesting para Maltego ESTA ES UNA VERSIÓN BETA, por favor sea amable y reporte cualquier problema Novedades Nuevas características Ahora compatible con múltiples workspaces para Metasploit a través de consultas Postgres Un script bash que ejecuta toneladas de módulos...

heimdall_webserver

ATENCIÓN, este proyecto está en versión beta, hay muchos errores y problemas, si quieres ayudar al proyecto úsalo en un laboratorio, no en tu entorno real. NO, aún no está implementado HTTPS, llegará en la próxima actualización Heimdall Es una herramienta para gestionar paquetes vulnerables en tu...

inhale

Inhale - Malware Inhaler Inhale es una herramienta de análisis y clasificación de malware capaz de automatizar y escalar muchas operaciones de análisis estático. Esta es la versión beta, destinada a pruebas, retroalimentación y desarrollo comunitario. Antecedentes Inhale comenzó como una serie de...

featherduster

FeatherDuster e Cryptanalib FeatherDuster è uno strumento scritto principalmente da Daniel "unicornfurnace" Crowley, con contributi della community, per violare la crittografia; cerca di rendere il più semplice possibile il processo di identificazione e sfruttamento di sistemi crittografici debol...

Endurance-Wiper

Endurance-Wiper Beta - Open Source A small wiper malware written in C using the .NET framework. If you are from Twitter or any other source, you can clearly tell this is in active development. You are free to check the updates here...

Pentest-Tools-Framework

Pentest Tools Framework exploits, Scanner, Password. Details | | ---|---|--- NEWS Modules PTF UPDATE! PTF OPtions ------------------------------------------------------------------------------------- | Global Option |...

PortGuard

Port-Guard Port-Guard is a USB port management and security tool designed for Debian. It allows you to control access to USB devices , maintain a custom whitelist , and run an automatic background scan to detect any unauthorized connection. ⚠️ Beta version : The software is functional, but...

Baskerville

Baskerville Reads from files or interface and writes to files in specified directory with filename based on unixtime of first packet in each file. Certain protocols can be suppressed, in which case only the first N packets are recorded to disk. This reduces disk usage saving data which is of litt...