CVE-2019-16920-MassPwn3r

0day exploit for Multiple D-Link Routers Vulnerability was found in latest firmware of the following D-Link products: DIR-655 DIR-866L DIR-652 DHP-1565 Current Description Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue...

CVE-2022-26134

CVE-2022-26134 -u URL, --url URL Target URL -c COMMAND, --command COMMAND Command -i LHOST, --lhost LHOST Reverse shell host address -p LPORT, --lport LPORT Reverse shell host port -f FILE, --file FILE Batch scan...

multiscanner

MultiScanner Introduction MultiScanner is a file analysis framework that assists the user in evaluating a set of files by automatically running a suite of tools for the user and aggregating the output. Tools can be custom built Python scripts, web APIs, software running on another machine, etc...

Webmin_1.890-POC

Webmin 1.890 expired Remote Root CVE-2019-15107 Webmin version 1.890 was released with a backdoor that could allow anyone with knowledge of it to execute commands as root. Versions 1.900 to 1.920 also contained a backdoor using similar code, but it was not exploitable in a default Webmin install...

CVE-2021-22205

CVE-2021-22205 CVE-2021-22205 RCE 도구는 공유 및 교류 목적으로만 제공됩니다. 무단 테스트에 사용하지 마십시오. 이로 인한 책임은 작성자와 무관합니다. -R string VPS to load tools eg: -R 127.0.0.1:8083 -T string Tool name eg: -T fscan -c string exec cmd eg: -c "id" default "id" -host string reverse shell host -m string Method for using of...

CVE-2024-27348

CVE-2024-27348 🪶 CVE-2024-27348 Proof of concept Exploit RCE in Apache HugeGraph Server Unauthenticated users can execute OS commands via Groovy injection in Apache HugeGraph Server. Usage 🛠 Exploit multiple targets ☣️ python3 CVE-2024-27348.py -f targets.txt -c "command to execute" Exploit single...

exploit-CVE-2022-25765

Exploit for CVE-2022-25765 pdfkit - Command Injection Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description The package pdfkit from 0.0.0 are vulnerable to Command Injection where...

cve-2024-10914

POC - CVE-2024–10914- Command Injection Vulnerability in name parameter for D-Link NAS Overview A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been declared as critical. Affected by this vulnerability is the function cgiuseradd of the file...

CVE-2021-40373

CVE-playsms There is a vulnerability in playsms 1.4.3 that allows potential attackers to execute remote code execution. how to reproduce RCE shell: https://playsms.org/ docker pull playsms/playsms:1.4.3 docker run -d -p 80:80 playsms/playsms login using admin:admin...

CVE-2023-33538

Python Exploit for TP-Link TL-WR940N/TL-WR841N Command Injection Vulnerability Usage Instructions 1. Basic Vulnerability Check : python tplinkexploit.py -t 192.168.1.1 -u admin -p admin 2. Execute Custom Command : python tplinkexploit.py -t 192.168.1.1 -u admin -p admin -c "yourcommandhere" 3...

rdap

OpenRDAP는 Go로 구현된 명령줄 RDAP 클라이언트입니다. https://www.openrdap.org - 홈페이지 https://www.openrdap.org/demo - 라이브 데모 기능 명령줄 RDAP 클라이언트 출력 형식: text, JSON, WHOIS 스타일 지원되는 쿼리 유형: ip domain autnum nameserver entity help url domain-search domain-search-by-nameserver domain-search-by-nameserver-ip...

Malleable-C2-Profiles

이 저장소에는 README가 없습니다...

CVE-2026-78306

CVE-2026-78306 — DJI Drone DUML Command Injection over Bluetooth POC CVE record: https://vulners.com/cve/CVE-2026-78306 NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-78306 Description DJI drones expose a Bluetooth interface used to establish a connection to the drone's Wi-Fi interface and exchan...

omnibus

OSINT Omnibus Developed & maintained by InQuest Table of Contents OSINT Omnibus Omnibus Documentation Vocabulary Running Omnibus API Keys Interactive Console Artifacts Overview Creating & Managing Artifacts Sessions Modules Machines Reporting Monitoring Modules OSINT Omnibus Developed & maintaine...

eviltree

EvilTree A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches. Created for two main reasons: While searching for secrets in files of nested directory structures, being...

gtfocli

GTFOcli GTFOcli는 잘못 구성된 시스템에서 로컬 보안 제한을 우회하는 데 사용할 수 있는 바이너리 검색 명령을 쉽게 사용할 수 있도록 해주는 명령줄 인터페이스입니다. 목차 목차 설치 사용법 Unix 바이너리 검색 Windows 바이너리 검색 도커화된 솔루션으로 검색 CTF 크레딧 기여 설치 go 사용: go install github.com/cmd-tools/gtfocli@latest homebrew 사용: brew tap cmd-tools/homebrew-tap brew install gtfocli docker 사...

NorthStarC2

NorthStarC2는 침투 테스트 및 레드 팀 목적으로 Engin Demirbilek이 개발한 오픈소스 명령 및 제어 프레임워크입니다. NorthStar C2 프레임워크는 두 개의 애플리케이션으로 구성됩니다: 세션을 관리하기 위한 서버 측 GUI 웹 애플리케이션과 C2 서버와 통신하기 위한 클라이언트 측 스테이저입니다. 빠른 설치 git clone https://github.com/EnginDemirbilek/NorthStarC2.git cd NorthStarC2/ chmod +x install.sh sudo...

CVE-2024-4577

CVE-2024-4577 Disclaimer This tool is intended only for personal security research and learning. Any direct or indirect consequences or losses caused by the dissemination or use of this tool are the sole responsibility of the user; the tool author assumes no responsibility. PHP NAME: PHP-CGI -...

zuthaka

협업 기반의 자유 오픈소스 Command & Control 통합 프레임워크로, 개발자가 자신의 C2의 핵심 기능과 목표에 집중할 수 있도록 지원합니다. 문서 살펴보기 » · 버그 신고 · 기능 요청 · 목차 1. 프로젝트 소개 문제점 해결책 사용된 기술 2. 이미 지원되는 C2 3. 시작하기 전제 조건 설치 4. 사용법 5. 로드맵 6. 라이선스 7. 연락처 프로젝트 소개 문제점 현재 C2 생태계는 현대 레드팀 운영과 다양한 요구에 적응하기 위해 빠르게 성장했습니다C2 선택에 대한 자세한 정보는 여기에서 확인할 수 있습니다. ...

Exploits_CVE-2019-19781

Remote Code Execution Exploit CVE-2019-19781- Citrix Application Delivery Controller & Gateway Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh...