CVE-2024-36971

CVE-2024-36971 — Proof of Concept Research & Analysis Only ⚠️ DISCLAIMER — READ BEFORE USING THIS REPOSITORY This repository is intended only for defensive research, analysis, and responsible reporting. It contains a non-exploitable proof of concept file named CVE-2024-36971 and a publicly...

cve-2022-26134

CVE-2022-26134 by 1vere$k Just simple PoC for the Atlassian Jira exploit. Provides code execution for unauthorised user on a server. CVE-2022-26134 - OGNL injection vulnerability. Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and...

CVE-2026-42031-SQL-Injection-Scanner

🛡️ CVE-2026-42031 Scanner SQL Injection Scanner untuk CKAN DataStore Tools ini digunakan untuk mendeteksi dan memvalidasi kerentanan CVE-2026-42031 SQL Injection pada platform CKAN DataStore . 📋 Fitur ✅ 8 Query Validasi otomatis database, tabel, kolom, dll. ✅ Multi-target scanning support domain &...

RedDrop

RedDrop Exfil Server Check out the accompanying MaverisLabs Blog Post Here! RedDrop Exfil Server is a Python Flask Web Server for Penetration Testers, Red Teamers, and Security Professionals which features: File Upload Automatic Payload Processing Automatic Archive Extraction JSON Logging...

Scavenger

Scavenger - Bot OSINT - REWORKED bot en acción Introducción Solo el código de mi bot OSINT que busca filtraciones de datos sensibles en sitios de paste. Términos de búsqueda: credenciales claves RSA privadas archivos de configuración de Wordpress cadenas de conexión MySQL enlaces onion volcados S...

Kvasir

Kvasir Welcome to Kvasir! Herein these directories lay the groundwork tools for effective data management during a Penetration Test. Penetration tests can be data management nightmares because of the large amounts of information that is generally obtained. Vulnerability scanners return lots of...

swap_digger

swapdigger swapdigger is a bash script used to automate Linux swap analysis for post-exploitation or forensics purpose. It automates swap extraction and searches for Linux user credentials, Web form credentials, Web form emails, HTTP basic authentication, WiFi SSID and keys, etc. Download and run...

juicy-php

juicy-php Juicy-php - finds PHP info files with juicy information...

GuardReasoner-VL

GuardReasoner-VL: Safeguarding VLMs via Reinforced Reasoning Yue Liu, Shengfang Zhai, Mingzhe Du Yulin Chen, Tri Cao, Hongcheng Gao, Cheng Wang Xinfeng Li, Kun Wang, Junfeng Fang, Jiaheng Zhang, Bryan Hooi 1National University of Singapore, 2Nanyang Technological University To enhance the safety ...

brawl-public-game-001

BRAWL One of the challenging problems for cyber security researchers developing detection and response capabilities is finding a realistic environment in which to test their hypothesis and capabilities. The cheapest method is to test capabilities on a small lab network. But this environment is...

CIMplant

CIMplant C port of WMImplant which uses either CIM or WMI to query remote systems. It can use provided credentials or the current user's session. Note: Some commands will use PowerShell in combination with WMI, denoted with in the --show-commands command. Introduction CIMplant is a C rewrite and...

http-stalling-detector

HTTP Stalling Detector HTTP stalling DoS attacks take advantage of an inability for webservers to determine if a remote client is just connected over a slow link or if the remote client is deliberately sending data very slowly to avoid the webserver doing a timeout and shutting down the connectio...

AperiSolve

Aperi'Solve...

CVE-2018-3252

CVE-2018-3252 1. Descompilar weblogic root@kitploit: private void handleDataTransferRequestHttpServletRequest paramHttpServletRequest, HttpServletResponse paramHttpServletResponse, AuthenticatedSubject paramAuthenticatedSubject throws IOException if isDebugEnabled debug"Received DataTransferReque...

pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

Stardox

Disponible en: Patrocinadores Muchas gracias a las empresas que apoyan Stardox: | | | ---|---|---|--- Acerca de Stardox es una herramienta avanzada de recopilación de información sobre stargazers de GitHub. Raspa GitHub y muestra los resultados en una vista de árbol, permitiéndote recopilar datos...

mosint

Features • Installation • Services • Usage • Docker • Config • Screen Mosint is an automated email osint tool written in Go that allows you investigate for target emails in a fast and efficient manner. It consolidates numerous services, enabling security researchers to swiftly access a wealth of...

mosint

Características • Instalación • Servicios • Uso • Docker • Config • Pantalla Mosint es una herramienta automatizada de OSINT para correos electrónicos escrita en Go que te permite investigar correos electrónicos objetivo de forma rápida y eficiente. Consolida numerosos servicios, lo que permite a...

forensicscanner

This repository does not have a README...

LiveContainer

LiveContainer An app launcher that runs iOS apps without actually installing them! Crowdin Project: | Documentation:liveconainer.github.io LiveContainer LiveContainer is an app launcher not emulator or hypervisor that allows you to run iOS apps inside it. Allows you to install unlimited apps 3...