362032 matches found
CVE-2022-26134_check
CVE-2022-26134check The script is used to check remotely if a Confluence server is vulnerable to the CVE-2022-26134 vulnerability. This vulnerability is a remote code execution flaw that allows an attacker to execute arbitrary code on the server if left unpatched. This vulnerability was being...
lisa.py
LLDB MCP Integration This project provides a Model-Context Protocol MCP integration for LLDB, allowing AI assistants like Claude to interact with your debugging sessions through a standardized interface. Overview The integration consists of two main components: 1. server.py - An MCP server that...
CVE-2019-19919
CVE-2019-19919 Handlebars Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' Vulnerability pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py Enter the target URL: Exploit Expected Output : Ente...
CVE-2025-8110
CVE-2025-8110 โ Gogs โค 0.13.3 RCE PoC Proof-of-Concept for CVE-2025-8110 , an authenticated arbitrary file write in Gogs โค 0.13.3 caused by improper symbolic-link handling in the PutContents API. An authenticated user can commit a symlink pointing to .git/config, then use the API to overwrite it...
cirrusgo
CirrusGo A fast tool to scan SAAS,PAAS App written in Go SAAS App Support : salesforce contentful next version Note flag -o output not working install : golang 1.18Ver go install -v github.com/Ph33rr/cirrusgo/cmd/cirrusgo@latest or go install -v github.com/Ph33rr/CirrusGo/cmd/cirrusgo@latest Help...
0l4bs
0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 | Removes Alert Chall...
quiver
Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...
burp2caido
About Burp2Caido is a tool that allows you to migrate exported Burpsuite HTTP history files into Caido. It was originaly developed by Monke. !WARNING This tool inserts HTTP data directly into the Caido project. Running it multiple times WILL add the requests again each time. Run it once!...
PPPwn
PPPwn - PlayStation 4 PPPoE RCE PPPwn is a kernel remote code execution exploit for PlayStation 4 up to FW 11.00. This is a proof-of-concept exploit for CVE-2006-4304 that was reported responsibly to PlayStation. Supported versions are: FW 7.00 / 7.01 / 7.02 FW 7.50 / 7.51 / 7.55 FW 8.00 / 8.01 /...
netstat2neo4j
Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...
dlink
Command Injection and Backdoor Account in D-Link NAS Devices Vulnerability Summary: The described vulnerability affects multiple D-Link NAS devices, including models DNS-340L, DNS-320L, DNS-327L, and DNS-325, among others. The vulnerability lies within the nassharing.cgi uri, which is vulnerable...
spring-cloud-function-rce
Spring Cloud Function SPEL Expression Injection Vulnerability CVE-2022-22963 Spring framework provides a comprehensive programming and configuration model for modern Java-based enterprise applications on any type of deployment platform. The serverless framework in Spring Cloud, the RoutingFunctio...
pyrmax
pyrmax ็จไบ Ubiquiti AirMAX ็บฟๅ่ฎฎๅธง็่งฃ็ ๅจๅ็ผ็ ๅจ๏ผๆถต็ AC๏ผWA ๅบไปถ๏ผๅ M๏ผXW/XM ๅบไปถ๏ผ็ณปๅใ ่งฃ็ ๏ผๆๆๅค้จๅคด็ฑ ksy/ ไธ็ Kaitai Struct ๆจกๅผ้ฉฑๅจใAC ่ฝฝ่ท ๏ผๆ็ๆฌ้จๆง๏ผไพๆฎ msgtype ๅๆข๏ผๅธฆ deauth XOR ๅปๆฉ็ ๏ผ็ฑ ac.py ๆๅๅฎ็ฐโโ่ฏฅ้ป่พไธ้ๅ็บฏ่งฃๆๅผ Kaitaiใ ็ผ็ ๏ผๆๅๅฎ็ฐ๏ผไธ่งฃ็ ่ทฏๅพ้ๅญๆฎตๅฏนๅบใ Status Variant| Decode| Encode| pcap iteration ---|---|---|--- AC| โ ๅ จ้จ 5 ็ง msg ็ฑปๅ๏ผbeaconใass...
LACheck
LACheck Multithreaded C .NET Assembly Local Administrative Privilege Enumeration Arguments ./LACheck.exe help | | /\ / | | | | | | / \ | | | | | | | | / /\ \ | | | ' \ / / | |/ / | | / \ | || | | | / | |// \ || |||||\ Usage: LACheck.exe smb rpc /targets:hostname,fqdn.domain.tld,10.10.10.10...
RSPET
RSPET RSPET Reverse Shell and Post Exploitation Tool is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario. DISCLAIMER: This software is provided for educational and PenTesting purposes and as a proof of concept. The developers do not endorse,...
CVE-2020-28243
CVE-2020-28243 A command injection vulnerability in SaltStack's Salt allows for privilege escalation via specially crafted process names on a minion when the master calls restartcheck. For a full writeup please see this blog post Affected Versions: All versions between 2016.3.0rc2 and 3002.2 Link...
BlackHole
BlackHole C RAT Remote Adminitration Tool Educational purposes only Technologies protobuf-net : message serialization/deserialization in slavemaster protocol NetMQ : network library used for the slavemaster system clientserver Lz4.Net : compression library ILMerge : packaging assemblies into a...
rebindMultiA
rebindMultiA rebindMultiA is a tool to perform a Multiple A Record rebind attack. rebindmultia.com is a domain that I've set up to assist with these attacks. It makes every IP its own authoritative nameserver for the domain IP.ns.rebindmultia.com. For example, 13.33.33.37.ns.rebindmultia.com's...
njsscan
njsscan njsscan ใฏใlibsast ใฎใทใณใใซใชใใฟใผใณใใใใฃใผใจใๆงๆใ่ช่ญใใใปใใณใใฃใใฏใณใผใใใฟใผใณๆค็ดขใใผใซ semgrep ใไฝฟ็จใใฆใNode.js ใขใใชใฑใผใทใงใณๅ ใฎๅฎๅ จใงใชใใณใผใใใฟใผใณใๆคๅบใงใใ้็ใขใใชใฑใผใทใงใณใในใ SAST ใใผใซใงใใ ใคใณใใง ใ่พผใใฆไฝๆ njsscan ใๆฏๆดใใ Paypal ใงๅฏไป: ใใญใธใงใฏใใในใใณใตใผ: eใฉใผใใณใฐใณใผใน & ่ชๅฎ่ณๆ ผ OpSecX Node.js Security: Pentesting and Exploitation - NJS ใคใณในใใผใซ pip install...
Pyramid
Pyramid What is it Pyramid is composed of: 1. a Python HTTP/S server that can deliver encrypted files chacha, xor 2. Python modules that can load in-memory dependencies of offensive tooling such as Bloodhound-py, secretsdump, LaZagne, Pythonnet, DonPAPI, pythonmemorymodule, paramiko, pproxy. 3...