pentest-muse-cli

Pentest Muse Pentest Muse is an AI assistant tailored for cybersecurity professionals. It can help penetration testers brainstorm ideas, write payloads, analyze code, and perform reconnaissance. It can also take actions, execute command line codes, and iteratively solve complex tasks. Pentest Mus...

vger

V'ger V'ger is an interactive command-line application for post-exploitation of authenticated Jupyter instances with a focus on AI/ML security operations. User Stories As a Red Teamer , you've found Jupyter credentials, but don't know what you can do with them. V'ger is organized in a format that...

jboss-autopwn

jboss-autopwn JBoss Autopwn as featured at BlackHat Europe 2010 - this version incorporates CVE-2010-0738 the JBoss authentication bypass VERB manipulation vulnerability as discovered by Minded Security C. Papathanasiou 2010 INTRODUCTION This JBoss script deploys a JSP shell on the target JBoss A...

magnus_billing_7.3.0_RCE_CVE-2023-30258

magnusbilling7.3.0RCECVE-2023-30258 There is a remote code execution vulnerability in magnus billing 7.3.0, in the parameter "democ" from the "icepay.php" resource, where you can escape the query and execute the command you want. VULNERABLE CODE if isset$GET'democ' if strlen$GET'democ' 5 exec"tou...

CVE-2024-49369

CVE-2024-49369 Overview This vulnerability leverages the Icinga JSON-RPC protocol to exploit monitored nodes running Icinga agents. By impersonating a Master/Satellite instance, attackers can potentially take over agents, execute arbitrary commands, or gain sensitive information. How to Use...

sak1to-shell

sak1to-shell Multi-threaded, multi-os/platform Linux/Windows c2 server and Windows reverse TCP shell client both written in C. Compiling reverse TCP shell client with i686-w64-mingw32-gcc: i686-w64-mingw32-gcc sakitorevshell.c lib/windows/sakitowincore.c -o sakitorevshell.exe -s -ffunction-sectio...

cve-2017-5123

CVE-2017-5123 This repository contains a demonstration of CVE-2017-5123 , an ICMP command-and-control backdoor, and a CWE-78 OS Command Injection vulnerable web app. Part of CSC 4308 - Challenge 3. Prerequisites Linux Kernel : 4.13 up to but excluding 4.13.7 Node.js : 10.x npm : 6.x Overview This...

CVE-2023-33246

CVE-2023-33246 Modify props.setProperty, execute command...

CVE-2018-6574

CVE-2018-6574 Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow go get remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked. from mitre RCE command The...

RedbloodC2

Public version of Redblood C2 This is a simple command and control server to handle sessions and your victims installation $ git clone https://github.com/kira2040k/RedbloodC2.git $ cd RedbloodC2 $ npm install $ node server.js Usage After install node.js and and all modules from npm execute: node...

MetabaseRceTools

MetabaseRceTools CVE-2023-38646 Metabase RCE Tool CVE-2023-38646 RCE Graphical Exploitation Tool Verification Module Input the specified URL to detect unauthorized token Command Execution This module requires executing the verification module to obtain a token first JarLocation: the location of...

CVE-2022-33891

「💥」CVE-2022-33891 Description The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in...

Win11Debloat

Win11Debloat Win11Debloat is a lightweight, easy to use PowerShell script that allows you to quickly declutter and customize your Windows experience, no installation required! You can use it to remove pre-installed apps, disable telemetry, remove intrusive interface elements and much more. No nee...

SharpNoPSExec

SharpNoPSExec File less command execution for lateral movement. SharpNoPSExec will query all services and randomly pick one with a start type disable or manual, the current status stopped and with LocalSystem privileges to reuse them. Once it select the service it will save its current state,...

SMShell

SMShell PoC for an SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers. This tool came as an insipiration during a research on eSIM security implications led by Markus Vervier, presented at Offensivecon 2023 Disclaimer This is not a complete C2 bu...

CVE-2026-26831

CVE-2026-26831: OS command injection in textract Summary textract through version 2.5.0 allows OS command injection through the file path supplied to multiple extractors. Several code paths pass that file path into childprocess.exec with inadequate sanitization. An attacker who can influence the...

url-status-checker

Status Checker URL Status Checker v2.1 Status Checker is a Python script that checks the status of one or multiple URLs/domains and categorizes them based on their HTTP status codes. Version 2.1.0 Features Check the status of single or multiple URLs/domains. Asynchronous HTTP requests for improve...

jboss-_CVE-2017-12149

jboss-CVE-2017-12149 verifyCVE-2017-12149.jar provides a command-line mode to verify the vulnerability. If the vulnerability exists, it returns a characteristic string. Simply execute the command: $ java -jar verifyCVE-2017-12149.jar http://xxx:8080 成功返回: vuln6581362514513155613jboss...

opsxcq-cve-2016-10033

PHPMailer 5.2.18 Remote Code Execution PHPMailer is the world's most popular transport class, with an estimated 9 million users worldwide. Downloads continue at a significant pace daily. Used by many open-source projects: WordPress, Drupal, 1CRM, SugarCRM, Yii, Joomla! and many more PHPMailer...

CVE-2017-5638

PoC for CVE: 2017-5638 - Apache Struts2 S2-045 Hi! I refactored the original script to use requests library, the other libraries were causing some errors to me. Hope it helps! Usage: python3 cve-2017-5638 url cmd-command...