struts-s2-052-deserialization-rce-lab

Apache Struts S2-052 XML Deserialization RCE This repository demonstrates exploitation of Apache Struts S2-052 CVE-2017-9805 using malicious XML deserialization. The exploit was developed while solving the INE eWPTX Practice Range – Struts XML Deserialization RCE lab. Vulnerability Overview Apach...

CVE-2017-6206

CVE-2017-6206 The DGS-1510 Websmart switch series firmware has been found to have security vulneratiblies. The vulnerabilities include unauthenticated command bypass and unauthenticated information disclosure. exploit.sh contains both PoC code and it will create a remote user at specified D-Link...

bitbang-cli

BitBang CLI bitbang is a single static binary remote-access multitool. From any browser: an interactive shell and file browser access to the remote machine. You can also reach web apps on that machine's network. Beyond the browser, it does TCP port forwarding, file copy, and terminal sharing. It...

Codify-TJNULL-OSCP-

Hack The Box — Codify Writeup Full penetration testing walkthrough and writeup for Codify machine on Hack The Box. 📌 Machine Info Field| Value ---|--- Name| Codify OS| Linux Difficulty| Easy Key Concepts| vm2 RCE CVE-2023-30547, SQLite DB Enum, Bcrypt Cracking, Bash Wildcard Pattern Matching Abus...

jsteg

jsteg go get lukechampine.com/jsteg jsteg is a package for hiding data inside jpeg files, a technique known as steganography. This is accomplished by copying each bit of the data into the least-significant bits of the image. The amount of data that can be hidden depends on the filesize of the jpe...

sherloq

An open source digital image forensic toolset Introduction "Forensic Image Analysis is the application of image science and domain expertise to interpret the content of an image and/or the image itself in legal matters. Major subdisciplines of Forensic Image Analysis with law enforcement...

CVE-2026-33453

camel-coap Header Injection → RCE Vulnerability Reproducer CVE-2026-33453 This project demonstrates a Camel message header injection vulnerability in Apache Camel's camel-coap component, tracked as CVE-2026-33453. An unauthenticated attacker who can send a single CoAP UDP packet can inject...

Manati

ManaTI Project Machine Learning for Threat Intuitive Analysis The goal of the ManaTI project is to develop machine learning techniques to assist an intuitive threat analyst to speed the discovery of new security problems. The machine learning will contribute to the analysis by finding new...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...

AirmonGUI

AirmonGUI A local web interface for the aircrack-ng wireless toolkit. Screenshots · Quick start · Features · Roadmap · Contributing !WARNING Use this only on networks you own or have written permission to test. Scanning, deauthenticating, or capturing traffic from networks you don't control is...

sliver-gui

Sliver GUI Download the latest release Sliver GUI is a cross-platform Electron desktop application for Sliver. It combines backend connections, live status views, dedicated workspaces, and a native Sliver console in a React interface built with HeroUI, HeroUI Pro, and Font Awesome. Features...

PentestGPT

!Contributorscontributors-shieldcontributors-url !Forksforks-shieldforks-url !Stargazersstars-shieldstars-url !Issuesissues-shieldissues-url !MIT Licenselicense-shieldlicense-url !Discorddiscord-shielddiscord-url PentestGPT AI-Powered Autonomous Penetration Testing Agent Published at USENIX...

bitcrook

Bitcrook Centralize and expedite OSINT investigations View the roadmap Table of Contents Information About Disclaimer Changelog Preview Attributions Usage Installation CLI GUI Docker Authentication Information About Bitcrook is an open-source intelligence apparatus that aims to centralize all of...

packetsifterTool

PacketSifter What is PacketSifter? PacketSifter is a tool to perform batch processing of PCAP data to uncover potential IOCs. Simply initializePacketSifter with your desired integrations VirusTotal, AbuseIPDB and pass PacketSifter a pcap and the desired switches and PacketSifter will sift through...

Interlace

Interlace Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support. Reviews / Howto Guides Interlace: A Tool to Easily Automate and Multithread Your Pentesting & Bug Bounty Workflow Without Any Coding Table of Contents Setup Usage -...

beelzebub

Beelzebub Open-source deception framework. Deploy realistic decoys. Observe attacker behavior. Turn interactions into security evidence. Explore Beelzebub Platform · Documentation · Quick start Beelzebub gives security teams a configurable way to study activity directed at decoy services. Define...

CVE-2026-31431-copy-fail

CVE-2026-31431 Copy Fail Exploit Part 1: Theoretical Concept How CVE-2026-31431 Works Instead of the system constantly fetching files directly from the slow physical hard disk—which wastes a lot of time the Linux system creates a temporary copy of the file inside RAM, known as the Page Cache. Thi...

quasibot

quasiBot quasiBot 0.3 - Read Me 07.08.14 Agenda QuasiBot is a complex webshell manager written in PHP, which operate on web-based backdoors implemented by user himself. Using prepared php backdoors, quasiBot will work as C&C trying to communicate with each backdoor. Tool goes beyond average...

C4

C4 C yberdelia, a C ollection of C ommand and C ontrol frameworks Table of Contents C4 Table of Contents What is this? Cyberdelia? What is a C2 framework? Why create this repo? Format Plan for this repo Github Specific content Contribute to project Resources used What is this? This is a very flui...

vimana-framework

Overview Vimana is a modular security framework for auditing Python APIs and Web applications. The plugin-based architecture enables security professionals to assess, fuzz, and analyze Python projects through automated and manual techniques. Core Capabilities: Vulnerability detection and...