a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE - CVE-2015-0204 FREAK Attack...

droid-hunter

.---. .----------- / \ / ------ / / \ / ----- ╔╦╗╦═╗╔═╗╦╔╦╗ ╦ ╦╦ ╦╔╗╔╔╦╗╔═╗╦═╗ ////// ' / --- ║║╠╦╝║ ║║ ║║───╠═╣║ ║║║║ ║ ║╣ ╠╦╝ //// / // : : --- ═╩╝╩╚═╚═╝╩═╩╝ ╩ ╩╚═╝╝╚╝ ╩ ╚═╝╩╚═ // / / / '-- By HaHwul // //..\ www.hahwul.com ====UU====UU==== https://github.com/hahwul/droid-hunter '//||\ ''...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

raptor

Raptor 是一个基于网页（Web服务+UI）的、以 GitHub 为中心的源码漏洞扫描器——它只需提供 GitHub 仓库 URL 即可扫描仓库。你可以设置 Webhook，以确保每次提交或合并 Pull Request 时自动扫描。扫描是异步进行的，结果仅对启动扫描的用户可见。 Raptor 的部分特性： 插件架构（即插即用外部工具，生成统一报告） Web 服务可用于自定义自动化（无需 UI） 轻松创建/编辑/删除新漏洞和/或编程语言的签名...

CVE-2021-22205

CVE-2021-22205 GitLab CE/EE 预认证远程代码执行（利用ExifTool） 该项目仅供学习使用，如果侵犯了任何人的权益，请联系我删除该项目。最后，请勿非法使用 。如果您在使用此工具的过程中有任何违法行为，您将自行承担所有后果。该工具的所有开发者和贡献者不承担任何法律及连带责任。 描述 在GitLab CE/EE中发现了一个问题，影响从11.9开始的所有版本。GitLab未能正确验证传递给文件解析器的图像文件，导致远程命令执行。 受影响版本： =11.9, =13.9, =13.10, 13.10.3 功能 通过Webpack...

r2kit

r2kit 此仓库中先前存放的代码已经过重新设计与打包。因此，本仓库不再维护。你可以查看 "old" 分支以了解最终状态；然而，由于 r2pipe API 的变更，"old" 分支中的大部分代码已无法使用。 如果你正在寻找可集成到自身项目或脚本中的实用工具，它们现已打包于 r2pyutils 中。（其中包含 funclist 和 funcstrings 作为实用脚本）。 如果你正在寻找签名（来自我的 r2con 2018 演讲），此功能正在拆分为一个独立的仓库 r2sigs。 如果你正在寻找 functoyara 脚本，我将在 r2sigs...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2 Introduction: Apache Struts 2 is an open source web application framework for developing Java EE Web applications,It is the second generation of the struts framework first released on 10th Oct 2006. Struts Framework is designed in a way that it helps creating Web...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

CVE-2026-25243

CVE-2026-25243 — double-free doble liberación de Redis RESTORE → ejecución remota de código Verificado contra Rocky Linux 8.10, aarch64, Redis 8.6.2, jemalloc 5.3.0. Referencia: https://www.zeroday.cloud/blog/redis-cve-2026-25243-deep-dive TLDR; Exploit estable, funciona contra varias...

CVE-2018-7600-Drupalgeddon2-RCE

CVE-2018-7600 Drupalgeddon2 — Proyecto Red Team Departamento de Ciberseguridad de ITSOLERA | Pasantía de Seguridad Ofensiva 2026 Resumen Este proyecto investiga, replica y documenta CVE-2018-7600 Drupalgeddon2 — una vulnerabilidad crítica CVSS 9.8 de Ejecución Remota de Código no autenticada en...

CVE-2025-30374

CVE-2025-30374 Vulnerabilidad de contaminación de clases en Taipy que conduce a RCE, XSS, DoS y fuga de credenciales Resumen Se ha identificado una vulnerabilidad de contaminación de clases en Taipy v4.0.3 la última versión en el momento del descubrimiento. Esta vulnerabilidad permite a atacantes...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

LeakLooker

LeakLooker - Powered by Binaryedge.io Find open databases/services GUI https://www.offensiveosint.io/leaklooker-gui-discover-browse-and-monitor-database-source-code-leaks/ https://github.com/woj-ciech/LeakLooker-X New version supports: Elasticsearch CouchDB MongoDB Gitlab Rsync Jenkins Sonarqube...

pathprober

pathprober Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once. Purpose Brute-forcing website directories or HTTP pathname and validate using HTTP response code is not relevant anymore. This tool will help you to perform a penetration...

aztarna

This repository has been archived and is not maintained any further. Refer to alurity for future progress on robot footprinting and fingerprinting. aztarna This repository contains Alias Robotics' aztarna, a footprinting tool for robots. Alias Robotics supports original robot manufacturers...

flare-ida

Code Grafter Function Replacements About Code Grafter Code Grafter is an IDA Python script that makes it possible to use IDA Pro's Bochs IDB Mode to emulate code that imports Windows API functions. Emulation environments like Bochs IDB mode do not resolve or emulate imported functions, resulting ...

cve-2026-75604

CVE-2026-75604 - Next.js path traversal → RCE Windows · research lab Reproduction lab and exploit tooling for CVE-2026-75604 , an unauthenticated path-traversal in the Next.js incremental cache that affects Windows hosts. A single un-escaped backslash lets an attacker read and write files outside...

CVE-2026-33017-Langflop

CVE-2026-33017 Langflow "Langflop" PoC de RCE no autenticado PoC para la falla de ejecución de código no autenticada buildpublictmp en Langflow. Sube un componente malicioso a un flujo público, activa una compilación y captura una shell inversa. Solo para pruebas de seguridad autorizadas. Úsalo...