cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs is a lightweight and self-hosted Git service similar to a private version of GitHub, designed to run easily on low-resource servers. The CVE-2025-8110 vulnerability is a critical security flaw that allows an attacker to bypass path restrictions by using symlinks. By...

CVE-2023-23752

CVE-2023-23752 Bulk scanner + get config from CVE-2023-23752 Screenshot Installations clone this repository install the requirements pip3 install -r requirements.txt...

sshconfig-lint

sshconfig-lint One engine for every place your SSH config changes. sshconfig-lint finds semantic mistakes in OpenSSH client configs: duplicate hosts, broken identity paths, unsafe options, weak algorithms, wildcard ordering, and tangled Include chains. Use the same rule codes locally, in Git hook...

CVE-2026-73678-PoC

CVE-2026-73678 — MindsDB Minds Platform Unauthenticated RCE CVSS 10.0 CVSS 10.0 Critical · CWE-94 / CWE-306 · GHSA-jcxw-h8ph-pxpv · VulnCheck Summary Minds Platform the open-source backend of mindsdb/mindshub, previously mindsdb/minds-platform exposes POST /api/v1/responses/ an OpenAI-compatible...

n8n-vulnerability-detection

n8n Vulnerability Detection Automated Nuclei templates for detecting n8n vulnerabilities. Created by@rxerium Overview Automated CVE detection templates for n8n Workflow Automation, with daily monitoring and template generation from GitHub Advisories, ProjectDiscovery, and NVD. Statistics : 3 CVEs...

firecall

firecall Automate SSH communication with firewalls, switches, etc. Description These scripts are designed to automate sending commands to a Cisco ASA firewall. The intended purpose here is to eliminate the need to manually log in to a firewall to make changes. This code can be run directly via...

libmsm_cameraconfig_exploit

Original code is written by @tewilove http://pastebin.com/8BPCDc4i...

spybrowse

BrowseSpy Be sure to change the ftp variables throughout the code, these variables contain the username, password, & IP address of the FTP server which receives the files. This code will do the following: 1. Copy itself into the %TMP% directory & name itself ursakta.exe 2. Add a registry entry to...

CaddySmith

CaddySmith CaddySmith is a small Python script that reads a Cobalt Strike or Sliver C2 profile and forges a Caddy web server config out of it. The generated Caddyfile turns a regular Linux box into a redirector: legitimate beacon traffic gets reverse-proxied to your team server, and anything else...

CVE-2023-29007

CVE-2023-29007 PoC repository for CVE-2023-29007 More information available at: https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007 https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/...

claudleak

claudleak Scans public GitHub repositories for leaked credentials in AI coding tool configuration files .claude/, .cursor/, .continue/, .codex/, CLAUDE.md, AGENTS.md, etc.. Uses TruffleHog for secret detection. Example .claude/ directory: "permissions": "allow": "Bashgo build:",...

CVE-2022-36162

CVE-2022-36162 Suggested description pdftoroff hovacui 1.1.0 is affected by: Command execution. The impact is: execute arbitrary code local. The component is: hovacui.c, line 1574. The attack vector is: To exploit the vulnerability, you just have to change HOME environment variable, put some...

kube-knark

Kube-Knark Project Trace your kubernetes runtime !! Kube-Knark is an open-source tracer that uses pcap & ebpf technology to perform runtime tracing on a deployed Kubernetes cluster. It is tracing the Kubernetes API execution and master node configuration files permission changes. The trace matchi...

iCULeak.py

iCULeak.py Tool to find and extract credentials from phone configuration files in environments managed by Cisco's CUCM Call Manager. When using Cisco's CUCM Call Manager, phone configuration files are stored on a TFTP server. These VoIP phone configuration files quite frequently contain sensitive...

git-fsmonitor

This is a documented known issue, but I found this during my research & its pretty useful for RT/PT. Summary: The FSMonitor helper is executed by git on every command like git status, git diff, etc., hence git will blindly launch whatever path we specfic there. Our IDEs runs git status...

CAPE-parsers

CAPE-parsers CAPE core and community parsers Configs structure CNCs: campaign: str botnet: str dgaseed: hex str version: str mutex: str useragent: str build: str cryptokey: str cryptokeytype: str algorithm. Ex: RC4, RSA public key. salsa20, xchacha20 raw: any other data goes here All CNC entries...

FinalShellDecodePass

FinalShellDecodePass Encryption/Decryption /Applications/FinalShell.app/Contents/Java/finalshell.jar!/myssh/O0O0OO0OOOO0OO0000O0O0O0000O00OOO0OOOOO00000OO0O0O0OOO00OOO0O00O000OOOO0OO00000O0OO0OOO00O0000OOOOOO.class The password field is in /Library/FinalShell/conn/xxxxxx/xxxxxxconnectconfig.json...

BruteRatel-DetectionTools

BruteRatel-DetectionTools A collection of Tools and Rules for decoding Brute Ratel C4 badgers All tools and rules are based on samples identified by PaloAlto in their report https://unit42.paloaltonetworks.com/brute-ratel-c4-tool/ Yara Rule The yara rule has been tested against the samples includ...

CVE-2019-3799

CVE-2019-3799 - Spring-Cloud-Config-Server Directory Traversal Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow applications to serve arbitrary configuration files through the...

Config-Exploiter

Config-Exploiter Config-Exploiter : dump config.php File From Joomla And Wordpress Websites Programmed By Belahsan Ouerghi . Installation sudo apt-get install git git clone https://github.com/TunisianEagles/Config-Exploiter.git cd Config-Exploiter chmod +x install.sh sudo ./install.sh chmod +x...