h8mail

h8mail is an email OSINT and breach hunting tool using different breach and reconnaissance services, or local breaches such as Troy Hunt's "Collection1" and the infamous "Breach Compilation" torrent. 📖 Table of Content Table of Content Features APIs Usage Usage examples Thanks & Credits Related...

git-vuln-finder

git-vuln-finder Finding potential software vulnerabilities from git commit messages. The output format is a JSON with the associated commit which could contain a fix regarding a software vulnerability. The search is based on a set of regular expressions against the commit messages only. If CVE ID...

Vmware-ESXI

CVE-2024-37085 upload di shell non autenticato fino a diventare amministratore completo su hypervisor esxi appartenenti a un dominio. Scarica ESXIVORTEX Dettagli: un bypass dell'autenticazione che porta all'upload di una shell nel contesto di vpxuser, consentendo di ottenere pieni permessi...

aiodnsbrute

Async DNS Brute Uno strumento Python 3.5+ che usa asyncio per forzare brutalmente i nomi di dominio in modo asincrono. Velocità È veloce. I benchmark su piccoli VPS collocano circa 100k risoluzioni DNS in 1.5-2 minuti. Una macchina amazon M3 è stata usata per fare 1 milione di richieste in poco p...

aiodnsbrute

Async DNS Brute A Python 3.5+ tool that uses asyncio to brute force domain names asynchronously. Speed It's fast. Benchmarks on small VPS hosts put around 100k DNS resoultions at 1.5-2mins. An amazon M3 box was used to make 1 mil requests in just over 3 minutes. Your mileage may vary. It's probab...

recollapse

REcollapse REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications. It can also be helpful to bypass WAFs and weak vulnerability mitigations. For more information, take a look at the REcollapse blog post. The goal of this tool ...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

VulnLab

VulnLab Un progetto di laboratorio per vulnerabilità web sviluppato da Yavuzlar. Logo Vulnerabilità SQL Injection Cross Site Scripting XSS Command Injection Insecure Direct Object References IDOR Cross Site Request Forgery CSRF XML External Entity XXE Insecure Deserialization File Upload File...

CVE-2024-53345

CVE-2024-53345 Critical 0 Day in Car Rental Management System Versioni 1.0 - 1.3 Descrizione: Esiste una vulnerabilità critica nella funzionalità di caricamento file del modulo System Settings all'interno del Car Rental Management System versioni da 1.0 a 1.3, che consente a utenti con privilegi...

concealed_position

Concealed Position Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install...

Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: CVE-2025-40204,CVE-2026-53224,CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIEECHO processing bsc1253437 bsc1270023 bsc1270024...

eaphammer

by Gabriel Ryan s0lst1c3 Current release: v1.14.1 Supports Python 3.9+. Overview EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on...

RogueWinRM

RogueWinRM RogueWinRM ist ein lokaler Privilegienausweitungs-Exploit, der es ermöglicht, von einem Dienstkonto mit SeImpersonatePrivilege zum Local System-Konto zu eskalieren, wenn der WinRM-Dienst nicht läuft standardmäßig unter Win10, aber NICHT unter Windows Server 2019. Kurz gesagt, es horcht...

lmg

Linux Memory Grabber Uno script per scaricare la memoria Linux e creare profili VolatilityTM. Hal Pomeranz [email protected], 2020-02-01 GRAZIE! "Se ho visto più lontano è perché stavo sulle spalle di giganti." Issac Newton Ci sono molte persone che meritano ringraziamenti per aver reso...

lmg

Linux Memory Grabber A script for dumping Linux memory and creating VolatilityTM profiles. Hal Pomeranz [email protected], 2020-02-01 THANKS! "If I have seen further it is by standing on the shoulders of giants." Issac Newton There are a lot of people who deserve thanks for making this simpl...

regexploit

Regexploit Find regexes which are vulnerable to Regular Expression Denial of Service ReDoS. More info onthe Doyensec blog Many default regular expression parsers have unbounded worst-case complexity. Regex matching may be quick when presented with a matching input string. However, certain...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: Servizio HTTP non autenticato di ES File Explorer Un harness di ricerca implementato indipendentemente, attento alla sicurezza, e un'analisi tecnica per CVE-2019-6447 , un servizio HTTP non autenticato esposto da versioni vulnerabili di ES File Explorer per Android. Solo ricerca...

tmpmail

A temporary email right from your terminal written in POSIX sh tmpmail is a command line utility written in POSIX sh that allows you to create a temporary email address and receive emails to the temporary email address. It uses 1secmail's API to receive emails. By default w3m is used to render th...

CVE-2024-21762_FortiNet_PoC

CVE-2024-21762FortiNetPoC Scanner proof-of-concept che ha come target CVE-2024-21762 nell'endpoint /remote/hostcheckvalidate di FortiOS SSL VPN con invio di payload reverse shell. Ecco un writeup in stile GitHub per il tuo progetto, che include un riepilogo chiaro e conciso, una guida all'uso e i...