CVE-2025-32756-POC

CVE-2025-32756: Fortinet RCE PoC A proof-of-concept for the critical stack-based buffer overflow vulnerability CVE-2025-32756 affecting Fortinet products. Vulnerability CVSS : 9.8 Critical Type : Stack-based buffer overflow in AuthHash cookie processing Impact : Unauthenticated remote code...

CVE-2025-4840

CVE-2025-4840 Likes and Dislikes Plugin = 1.0.0 - Unauthenticated SQL Injection Description The Likes and Dislikes Plugin plugin for WordPress is vulnerable to SQL Injection via the 'post' parameter in all versions up to, and including, 1.0.0 due to insufficient escaping on the user supplied...

t14m4t

t14m4t t14m4t is an automated brute-forcing attack tool, wrapper of THC-Hydra and Nmap Security Scanner. t14m4t is scanning an user defined target or a document containing targets for open ports of services supported by t14m4t , and then starting brute-forcing attack against the services running ...

CVE-2024-3121

CVE-2024-3121 - Remote Code Execution RCE in parisneo/lollms Discovered by: Syed Jan Muhammad Zaidi GitHub: dark-ninja10 CVE ID: CVE-2024-3121 Repository Affected: parisneo/lollms 🧨 Vulnerability Summary A Remote Code Execution RCE vulnerability exists in the createcondaenv function of the lollms...

Sooty

Overview Sooty is a tool developed with the task of aiding SOC analysts with automating part of their workflow. One of the goals of Sooty is to perform as many of the routine checks as possible, allowing the analyst more time to spend on deeper analysis within the same time-frame. Details for man...

RustHound

This version is only compatible withBloodHound Legacy 4.x Version compatible withBloodHound Community Edition CE can be found here RustHound-CE. Summary Limitation Description How to compile it? Using Makefile Using Dockerfile Using Cargo Linux x8664 static version Windows static version from Lin...

terragoat

TerraGoat - Vulnerable Terraform Infrastructure TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find the...

CVE-2024-44541

CVE-2024-44541: SQL Injection Vulnerability in Inventio Lite v4 Description Inventio Lite v4 is vulnerable to SQL Injection SQLi in the /action=processlogin endpoint. This vulnerability allows attackers to inject arbitrary SQL queries via the username parameter in POST requests, potentially leadi...

x8-Burp

This app is no longer supported The tool helps to find hidden parameters that can be vulnerable or can reveal interesting functionality that other hunters miss. Greater accuracy is achieved thanks to the line-by-line comparison of pages, comparison of response code and reflections. Features...

CVE-2024-10410

Source code Online Hotel Reservation System in PHP/MySQLi with Source Code | SourceCodester Description A high risk vulnerability was found in Online Hotel Reservation System, affecting the upload function of /marimar/admin/modroom/controller.php file. The bypass detection operation of image...

amun

Amun Amun was the first python-based low-interaction honeypot, following the concepts of Nepenthes but extending it with more sophisticated emulation and easier maintenance. Requirements Pyhon = 2.6 no Python3 support yet optional Python Psyco available at http://psyco.sourceforge.net/ optional...

CVE-2022-27251

CVE-2022-27251 Remote Code Execution in LocalStack 0.12.6 Due to the lack of sanitization on user input on the Lambda API handler field whilst spawning Lambda functions and the way Docker containers are insecurely spawned, an injection can be provided through AWS CLI in the --handler option to be...

ZeroPoint

ZeroPoint.ps1 ⚠ A defensive PowerShell utility to detect and mitigate exploitation of the CVE-2025-53770 zero-day vulnerability in Microsoft SharePoint Server. 🔍 What it Does This PowerShell script is designed to: Detect compromise indicators, such as suspicious .aspx webshells Parse ULS logs to...

Invoke-LinkSpray

Invoke-LinkSpray Powershell script to create malicious SMB or WebDAV links to steal NTLM authentication. Takes UNC or local folder paths from a file specified by the -ShareList parameter. Optionally, -Depth can be used to specify how many folders to recurse when creating URL files. Also supports ...

CVE-2026-85706

CVE-2026-85706 — GitLab Unauthenticated Arbitrary File Read For authorized penetration testing and Red Team operations only. Unauthorized use constitutes a criminal offense. See Legal Notice. Overview CVE-2026-85706 is a CVSS 10.0 path traversal vulnerability in GitLab Community and Enterprise...

bypass-url-parser

Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most of the python requests do url/path/parameter encoding/decoding, and I hate this. If I submit raw chars, I want raw chars to be sent...

omnibus

OSINT Omnibus Developed & maintained by InQuest Table of Contents OSINT Omnibus Omnibus Documentation Vocabulary Running Omnibus API Keys Interactive Console Artifacts Overview Creating & Managing Artifacts Sessions Modules Machines Reporting Monitoring Modules OSINT Omnibus Developed & maintaine...

voltron

Voltron Voltron is an extensible debugger UI toolkit written in Python. It aims to improve the user experience of various debuggers LLDB, GDB, VDB and WinDbg by enabling the attachment of utility views that can retrieve and display data from the debugger host. By running these views in other TTYs...

cve-2022-33891

cve-2022-33891 Usage: pip3 install requests If you do not use the -d parameter, the dnslog domain name will be automatically applied for you. 如果你不使用-d参数，则会自动为您申请dnslog域名。 python3 cve202233891poc.py -u http://127.0.0.1 python3 cve202233891poc.py -f url.txt python3 cve202233891poc.py -u...

SHA256-CDP

SHA256-CDP: Cyclic Digit-sum Projection GPU-accelerated rainbow table implementation of the CDP structural analysis framework for SHA-256. Built on the findings of the CDP paper DOI: 10.5281/zenodo.20627240, this repository provides a complete, working implementation of CDP-based rainbow chain...