JCEzploit-CVE-2026-48907

JCEzploit Joomla JCE Security Testing Framework A professional command-line utility for authorized penetration testing, controlled vulnerability research, and defensive validation. Authorized use only. Run this project exclusively against systems you own or are explicitly permitted to test. Use a...

CVE-2019-2890

CVE-2019-2890 WebLogic Deserialization RCE Vulnerability 0x01 Download SerializedSystemIni.dat /root/Oracle/Middleware/userprojects/domains/basedomain/security root@159475444bab:/Oracle/Middleware/userprojects/domains/basedomain/security md5sum SerializedSystemIni.dat...

qscan

Quick Network Scanner Quick Network Scanner project includes: qscan: a rust library for asynchronous network ports scanning see README. qsc: a command line utility built on top of qscan library for quick network scanning activities see README. NOTE: in order to properly use the library and the...

gcp_scanner

Disclaimer This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose. GCP Scanner This is a GCP resource scanner that can help determine what level of acces...

dnsviz

Table of Contents Installation Usage Pre-Deployment DNS Testing Docker Container Description DNSViz is a tool suite for analysis and visualization of Domain Name System DNS behavior, including its security extensions DNSSEC. This tool suite powers the Web-based analysis available at...

Thunderstorm

Thunderstorm Thunderstorm is a modular framework to exploit UPS devices. For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future. CVE Thunderstorm is currently capable of exploiting the following CVE: CVE-2022-47186 –...

leprechaun

Leprechaun .-----. / V \ |...| |.....| .-' '-. .-. .-./ .--. |\ /| .-;.-"-.-;;-, =/ . -;,-;, . .-.-. . / ||'-'|| \ ,'--;.\ .;--' // o \ // --.. o '';,//| || : || |\ ;' \ '.\--' |"""""""|// / ':.// ,/\ | '---'| ||| ; Leprechaun ; ;""|""; \ / | '. vonahisec .' .' / \ '. '-,. .,-' --' --' /...

SILENTCHAIN

SILENTCHAIN AI™ - Community Edition 🔗 ⛓️ 🔒 AI-Powered Passive Vulnerability Analysis for Burp Suite Intelligent • Silent • Adaptive • Comprehensive 🚀 Getting Started • 📖 Documentation • 🔧 Configuration • 📊 Benchmarks • ⬆️ Upgrade to Pro Note: This is the Community Edition. Commercial and...

CVE-2023-22518

CVE-2023-22518 Improper Authorization Vulnerability in Confluence Data Center and Server. Atlassian has alerted administrators about a critical vulnerability in Confluence. Exploiting this issue can lead to data loss, so developers urge you to install patches as soon as possible. It is noted that...

OpenPetya

OpenPetya A Proof-of-Concept bootkit and UEFI boot application inspired by Petya ransomware, written in Assembly, C, and C++ If you find this project helpful or informative, I would truly appreciate a ⭐ on the repository. Your support would be a great motivation for me to continue improving this...

imbyter-WinRAR_CVE-2023-38831

💥 WinRAR Vulnerability Description CVE-2023-38831 A spoofable file extension vulnerability exists in WinRAR versions prior to 6.23. Attackers can exploit this vulnerability by crafting specially packaged files that appear harmless, such as JPG .jpg image files, text files .txt, or PDF documents...

ExtractBitlockerKeys

A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain. Features Automatically gets the list of all computers from the domain controller's LDAP. Multithreaded connections to extract Bitlocker keys from LDAP. Iterate on LDAP result...

threat-modeling-mcp-server

Threat Modeling MCP Server A Model Context Protocol MCP server for comprehensive threat modeling with guided code validation. Table of Contents Overview Quick Start Prompts Key Features Prerequisites Installation Running with Kiro CLI Output File Management Quick Reference Tools Overview Threat...

CVE-2025-24104

CVE-2025-24104 Writeup: Reading Files Out-of-Sandbox I reported a bug that Apple later tracked as CVE-2025-24104. In my original report, I demonstrated how a malicious backup could be used to bypass sandbox restrictions. However, Apple’s initial description stated that this vulnerability could le...

Nmap-API

Nmap API Uses python3.10, Debian, python-Nmap, and flask framework to create an Nmap API that can do scans with a good speed online and is easy to deploy. This is an implementation for our college PCL project which is still under development and constantly updating. API Reference Get all items GE...

advisories

About me Twitter: @justinsteven Blog: https://www.justinsteven.com/ Advisories Listed in reverse chronological order. Click any title to read the full advisory. Gartner Peer Insights Widget postMessage DOM XSS Disclosure date: 2023-02-03 The Gartner Peer Insights Widget had a DOM XSS vulnerabilit...

SilentButDeadly

SilentButDeadly Overview SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connectivity using Windows Filtering Platform WFP. This version focuses solely on network isolation without process termination. Blog:...

openclaw-hardening-check

This script only reads. It fixes nothing and does not guarantee that you are safe. Green output means only that the checks listed below passed—and nothing more. OpenClaw hardening check openclaw-hardening-check.mjs is a small, dependency-free, offline review of an OpenClaw installation. It reads...

CVE-2018-7600-PoC

SAWPOC — CVE-2018-7600 A Python Proof of Concept for CVE-2018-7600 , also known as Drupalgeddon2. CVE-2018-7600 is a critical vulnerability affecting certain versions of Drupal 7. Under vulnerable configurations, an unauthenticated attacker may be able to inject malicious input and achieve remote...

zabbix-threat-control

Zabbix Threat Control ztc Turn the Zabbix you already run into a vulnerability-management console. ztc reads each host's software inventory through the stock zabbix-agent2 no extra agent to deploy, audits it against Vulners, and pushes scored, per-host findings — problems, dashboards and CVSS...