381160 matches found
struts2-tool
Struts2 Vulnerability Detection and Exploitation Tool s2tool A pure Java implementation of a Struts2 S2-045 / S2-046 CVE-2017-5638 vulnerability detection and exploitation tool. The detection module covers both the S2-045 / S2-046 vulnerabilities, and the exploitation module provides capabilities...
threat-hunting-guide
Corelight Threat Hunting Guide working copy This repository serves as the working data for the Corelight Threat Hunting Guide. The source prose which is maintained here is periodically put through editing, layout, and graphic design, and then published as a PDF file and distributed by Corelight,...
PIVert
PIVert - PIV smart card emulator Introduction PIVert is a NIST SP 800-73 PIV smart card emulator. You can supply PIVert with a PFX file containing a certificate and corresponding private key and the tool will emulate the card to Windows as a genuine PIV card. The card can then be used for...
zkar
ZKar ZKar is a Java serialization protocol analysis tool implement in Go. This tool is still work in progress , so no complete API document and contribution guide. ZKar provides: A Java serialization payloads parser and viewer in pure Go, no CGO or JDK is required From the Java serialization...
React2Shell-PoC-CVE-2025-55182
React2Shell CVE-2025-55182 Exploitation Simulation Note: This document is for educational and security research purposes only. Do not use to attack systems without authorization. 1. Overview CVE-2025-55182, also known as React2Shell, is a critical Remote Code Execution RCE vulnerability affecting...
CVE-2024-4577-RCE-ATTACK
PHP CVE-2024-4577-RCE-ATTACK-ATTACK π Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set to use certain code pages, Windows may use "Best Fit" behavior to replace characters in the command line...
MacMaster
MacMaster: Advanced Network Interface Management and Monitoring MacMaster is a comprehensive command-line tool crafted for network professionals and enthusiasts alike. It stands out as a powerful utility for manipulating the MAC addresses of network interfaces on various systems. Designed with bo...
K55
K55 - Linux x8664 Process Injection Utility C++14 About K55 pronounced: "kay fifty-five" The K55 payload injection tool is used for injecting x8664 shellcode payloads into running processes. The utility was developed using modern C++11 techniques as well as some traditional C linux functions like...
firehol
FireHOL http://firehol.org/ FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade Notes. Cloning...
CVE-2026-22003-Redis-Lua-Sandbox-Escape-via-debug.sethook-
CVE-2026-22003 β Redis Lua Sandbox Escape via debug.sethook Program Code Lua + Python trigger -- redissandbox.lua - Script that attempts sandbox escape local function escape debug.sethookfunction -- This hook runs in a privileged context os.execute"id /tmp/redisescape" end, "r" local a = 1 end...
gori
A fast, keyboard-driven HTTP intercepting proxy and pentesting toolkit for the terminal built for humans and AI agents alike. Installation β’ Usage β’ Documentation β’ Contributing gori κ³ λ¦¬ β Korean for ring, link, loop sits in the loop between your client and its target, capturing every request and...
exploit-writing-for-oswe
Exploit Writing for OSWE Background What This repository contains a list of useful snippets and tips that pertain to the writing of exploit scripts in the OSWE labs and certification exam. Some examples here may go against certain coding practices, but our end goal is to write the exploit script...
T3MP3ST
π©οΈ T3MP3ST π©οΈ βββββββββββββββ ββββ βββββ ββββββ ββββββ ββββββ βββββββββ β βββ ββββ β βββββββ βββββββ βββββ β βββ β β βββ ββ β ββββ ββββββ βββ ββββββββ ββββββββ β ββββ β ββββ ββ β ββββ β βββ β βββ βββ βββββββ ββββ β β ββββ ββββ β ββββ β βββββββββββ ββββββββ β βββββββββββββββββ ββββ β β ββ ββ ββ ββ...
cve-2025-53770-research
cve-2025-53770-research π¨ Threat intel & incident response research on SharePoint "ToolShell" RCE zero-day CVE-2025-53770. π΅οΈββοΈ Covers root-cause deserialization flaws, attack timelines, risk metrics, and defensive EDR validation playbooks. π‘οΈ π΅οΈ CVE-2025-53770 β SharePoint "ToolShell" Zero-Day...
patch-checker
PatchChecker This is the code base for the service running on: https://patchchecker.com. In short, PatchChecker is a web application running on flask that provides output similar to that of Watson. However by using PatchChecker, one is not required to execute a binary on the target machine...
mcpguard-dynamic
MCPGuard-Dynamic Kernel-level sandboxing for LLM agent tool calls made through the Model Context Protocol MCP. MCPGuard sits as a transparent proxy between an MCP client the agent / runner and an MCP server subprocess, applying three layered defenses to every tool invocation. The lowest layer is...
vsftpd-cve-2011-2523-lab
Exploitation of VSFTPD 2.3.4 Backdoor CVE-2011-2523 A hands-on penetration testing lab demonstrating the identification and exploitation of the VSFTPD 2.3.4 backdoor CVE-2011-2523 on the intentionally vulnerable Metasploitable2 virtual machine using the Metasploit Framework. Disclaimer This proje...
mapXplore
mapXplore EspaΓ±ol mapXplore is a modular application that imports data extracted of the sqlmap to PostgreSQL or SQLite database. Its main features are: Import of information extracted from sqlmap to PostgreSQL or SQLite for subsequent querying. Sanitized information, which means that at the time ...
enject
enject Hide .env secrets from prAIng eyes. Note: this project was previously called enveil and has been renamed to enject AI coding tools like Claude Code, Copilot, Cursor, and others can read files in your project directory, which means a plaintext .env file is an accidental secret dump waiting ...
Hale
About Hale is a botnet command & control monitor/spy with a modular design to easily develop new modules that monitor new protocols used by C&C servers. Hale comes with IRC and HTTP monitors developed with Twisted to handle scalability of a large amount of connections. Theses modules have...