CVE-2024-46278-teedy_1.11_account-takeover

【CVE-2024-46278】teedy1.11account-takeover 【Teedy 1.11】سرقة حساب عبر XSS التفاصيل توجد ثغرة أمنية تسبب XSS عند تنزيل الملفات. يمكن أن تسمح ثغرة XSS لمسؤول Teedy بسرقة حساب ببضع نقرات. تم تصنيف هذه الثغرة كـ CVE-2024-46278: https://vulners.com/cve/CVE-2024-46278 إثبات المفهوم PoC قم بتسجيل الدخول...

tulpar

Tulpar هو أداة مسح ثغرات ويب مفتوحة المصدر تم كتابتها لأتمتة اختبار الاختراق على الويب. يحتوي Tulpar على الميزات التالية. حقن SQL طريقة GET XSS طريقة GET الزحف كشف البريد الإلكتروني كشف بطاقة الائتمان Whois حقن الأوامر طريقة GET اجتياز الدليل طريقة GET تضمين الملف طريقة GET معلومات الخادم معلومات...

tulpar

Tulpar is a open source web vulnerability scanner for written to make web penetration testing automated. Tulpar has the following features. -Sql Injection GET Method -XSS GET Method -Crawl -E-mail Disclosure -Credit Card Disclosure -Whois -Command Injection GET Method -Directory Traversal GET...

PPLBlade

PPLBlade Protected Process Dumper Tool that support obfuscating memory dump and transferring it on remote workstations without dropping it onto the disk. Key functionalities : 1. Bypassing PPL protection 2. Obfuscating memory dump files to evade Defender signature-based detection mechanisms 3...

smalien

Smalien Smalien is an information flow analysis and information leakage detection tool for Android application analysts. Smalien performs static taint analysis of Android applications on a Linux machine as well as dynamic taint analysis, detection of information leakage due to implicit informatio...

macphish

macphish Office for Mac Macro Payload Generator Attack vectors There are 4 attack vectors available: beacon creds meterpreter meterpreter-grant For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell. beacon On execution, this payload...

PersistAssist

PersistAssist PersistAssist is a fully modular persistence framework written in C. All persistence techniques contain a cleanup method which will server to remove the persistence aside from the persistence code. This is a WIP so there are many empty classes, the main object of this project...

AutoWIFI

Wireless penetration testing framework. Automates the full attack chain - recon through exploitation - with a clean terminal interface. Features Multi-vector attacks - WEP ARP replay, fragmentation, chopchop, WPA/WPA2 handshake capture, PMKID, WPS pixie dust, PIN brute force Smart target selectio...

CVE-2017-10271

تحديد واستغلال CVE-2017-10271. ثغرة RCE غير مصادق عليها في WebLogic. https://nvd.nist.gov/vuln/detail/CVE-2017-10271 https://www.oracle.com/technetwork/topics/security/cpuoct2017-3236626.html POST /wls-wsat/CoordinatorPortType HTTP/1.1 Host: SOMEHOSTHERE Content-Length: 1226 content-type: text/xm...

PHP-Fuzzer

PHP Fuzzer This library implements a fuzzer for PHP, which can be used to find bugs in libraries particularly parsing libraries by feeding them "random" inputs. Feedback from edge coverage instrumentation is used to guide the choice of "random" inputs, such that new code paths are visited...

S2-053-CVE-2017-12611

S2-053-CVE-2017-12611 نص برمجي بسيط لاستغلال ثغرة RCE في Struts 2 S2-053 CVE-2017-12611 الاستخدام exploit.py مثال $ python s2-053-exploit.py "http://127.0.0.1" "name" "uname -a" Generated EXP:...

autopentest-ai

AutoPentest An agentic pentesting MCP server that automates web application penetration testing using the full OWASP Web Security Testing Guide and PortSwigger Web Security Academy technique references. Point it at a target — it crawls your app, maps every endpoint, then spawns role-specialized...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Security Research Lab CVE-2025-14847 | CVSS 8.7 High | Unauthenticated Memory Disclosure 📖 Full Documentation • 🔬 Technical Analysis • ⚡ Quick Commands 🎯 CVE-2025-14847 Summary MongoBleed is a critical memory disclosure vulnerability in MongoDB's network transport...

brutus

The Brutus Exploitation Framework An educational exploitation framework shipped on a modular and highly extensible multi-tasking and multi-processing architecture. Table of Contents Introduction Demos Installation Usage Features Documentation MAC Address Management ARP Network Scanner ARP Spoofin...

authkeysync

AuthKeySync Automatically synchronize SSH public keys from remote URLs to your servers 📖 Full Documentation The Problem Managing SSH access across multiple servers is painful: Team members join or leave, and you need to update authorizedkeys on every server Developers rotate their SSH keys, and n...

httpgrep

Description A fast, asynchronous Python tool that scans HTTPS servers and greps for strings or regex patterns in HTTP response bodies and headers. It takes single hosts, URLs, CIDR ranges, IP ranges or files; scans multiple ports per target single, comma-lists or ranges, auto-detecting TLS vs pla...

httpgrep

الوصف أداة Python سريعة وغير متزامنة تفحص خوادم HTTPS وتبحث عن سلاسل نصية أو أنماط regex في أجسام وترويسات استجابات HTTP. تستقبل مضيفًا واحدًا، أو عناوين URL، أو نطاقات CIDR، أو نطاقات IP، أو ملفات؛ وتفحص منافذ متعددة لكل هدف منفذ واحد، قوائم مفصولة بفواصل أو نطاقات، مع الكشف التلقائي عن TLS مقاب...

Admin-Panel_Finder

Admin Panel Finder A burp suite extension that enumerates infrastructure and application Admin Interfaces. OWASP References: Classification : Web Application Security Testing 02-Configuration and Deployment Management Testing OTG v4 : OWASP OTG-CONFIG-005 WSTG : WSTG-CONF-05 Why should I use this...

HashCheck

PasswordHashCheck This project aims to assist in the search for leaked passwords while maintaining a high level of privacy using the k-anonymity method. To achieve this, the APIs of different services are used, sending only a part of the Hash of the password we want to check, for example, the fir...

Zydra

Zydra Zydra is a file password recovery tool and Linux shadow file cracker. It uses the dictionary search or Brute force method for cracking passwords. Supported Files RAR Files Legacy ZIP Files PDF Files Linux Shadow Files zydra can find all the user’s password in the linux shadow file one after...