dbslice

dbslice Extract minimal, referentially-intact database subsets for local development and debugging. The Problem Copying an entire production database to your machine is infeasible. But reproducing a bug often requires having the exact data that caused it. dbslice solves this by extracting only th...

CVE-2025-58443

CVE-2025-58443 exploit POC for https://github.com/FOGProject/fogproject which is authentication bypass leads to dump DB that include full DB dump, that include clear text password and users and admin password hash. vulnerable version : 1.5.10.1673 below a script that will exploit the vulnerabilit...

Cve-api

Parse & filter the latest CVEs from https://cve.mitre.org Docs Usage http://localhost:4000/cve?target=KEYWORD The year parameter is optional. http://localhost:4000/cve?target=KEYWORD&year=YEAR Examples http://localhost:4000/cve?target=ruby%20on%20rails...

subdosec

Subdosec Subdomain takeover scanner & reconnaissance tool. Install • Usage • Web Based • Contribution • Online scan • Acknowledgments Subdosec is a fast and accurate subdomain takeover scanner with no false positives, featuring a public database of vulnerable subdomains and detailed non-vulnerabl...

PoC-CVE-2025-66224

OrangeHRM RCE Exploit - CVE-2025-66224 📋 Description This Proof of Concept PoC demonstrates a Remote Code Execution RCE vulnerability in OrangeHRM through command injection in the sendmailpath configuration parameter. The exploit works by: 1. Injecting a malicious payload into the MySQL database...

some-tweak-to-hide-jwt-payload-values

some-tweak-to-hide-jwt-payload-values a handful of tweaks and ideas to safeguard the JWT payload, making it futile to attempt decoding by constantly altering its value, ensuring the decoded output remains unintelligible while imposing minimal performance overhead. What is a JWT Token? A JSON Web...

pike-agent

Pike Agent pike-agent records and analyzes how programs behave on Linux. It traces a program's activity, indexes it into a database, and lets you chat with an LLM agent about it in a TUI. Example of prompts: Crash diagnosis: This program crashed with a bus error. What happened? Race condition...

telegram-story-scraper

Telegram Story Scraper 📱 A Python script that allows you to automatically scrape and download stories from your Telegram friends using the Telethon library. The script continuously monitors and saves both photos and videos from stories, along with their metadata. TGSS - Main Interface Important...

go-rpmdb

go-rpmdb Library for enumerating packages in an RPM DB Packages file without bindings. package main import "fmt" "log" rpmdb "github.com/knqyf263/go-rpmdb/pkg" func main if err := run; err != nil log.Fatalerr func run error db, err := rpmdb.Open"./Packages" if err != nil return err pkgList, err :...

CVE-2024-7928

CVE-2024-7928 POC for CVE-2024-7928. Will attempt to retrieve DB details for FastAdmin instances. How to Use FOFA : app="FASTADMIN" Install the script requirements: pip install -r requirements.txt Single Target: python CVE-2024-7928.py -u https://target:9090 Bulk Sscan: python CVE-2024-7928.py -f...

WebGoat.NET

From the prompt, cd into the WebGoat.NET DB directory % cd /WebGoat.NET/DB Start the mysql utility, giving the name and password, if needed of a user permission to create databases. For example, to use the default root user: % mysql --user=root Create the webgoatcoins database and load the schema...

Backdooring-ZMM100-FingerPrint-Devices

Hacking Embedded Devices : Hardware platform ZMM100 : The fingerprint access control device Made by ZKSoftware. Default User/Password : root:solokey Protocol : Telnet 23. Scripts : pwnit.py : Automated tool for hacking devices. hell : second backdoor. leak-data.sh : third backdoor. YouTube Video ...

netstat2neo4j

Netstat Visualization with Neo4j Description Graphs help to spot anomalies and patterns in large datasets. This script takes netstat information from multiple hosts and formats them in a way to make them importable into Neo4j. Neo4j can be queried for find connections to certain hosts, from certa...

CVE-2020-2969

CVE-2020-2969 The PoC for CVE-2020-2969 is documented here: https://packetstormsecurity.com/files/179027/Oracle-Database-Password-Hash-Unauthorized-Access.html...

ODBParser

| ODBParser ---|--- TL;DR ODBParser is a tool to search for PII being exposed in open databases. ONLY to be used to identify exposed PII and warn server owners of irresponsible database maintenance OR to query databases you have permission to access! PLEASE USE RESPONSIBLY What is this? Wrote thi...

OWASP-WSTG-Rag

OWASP WSTG RAG A Retrieval-Augmented Generation RAG system that indexes the OWASP Web Security Testing Guide WSTG into a vector database, providing instant access to security testing methodologies via REST API and MCP Model Context Protocol for Claude Code integration. Features Complete WSTG...

SCOMDecrypt

SCOMDecrypt - SCOM Credential Decryption Tool Released as open source by NCC Group Plc - http://www.nccgroup.trust/ Developed by Richard Warren, richard dot warren at nccgroup dot trust http://www.github.com/nccgroup/SCOMDecrypt Released under AGPL, see LICENSE for more information Introduction...

prithvi

Prithvi A Report Generation Tool for Security Assessment Usage This project of ours could be used for report generation and its very easy to use. It includes following features 1. We can add Owasp Types and recommendation with details. 2. We can add Multiple Projects and work on it separately. 3...

fastjson-1.2.58-rce

fastjson-1.2.58-rce need: fastjson autoType is enabled h2 database and some jar . ├── fastjson-1.2.58.jar ├── h2-1.4.199.jar ├── jackson-annotations-2.9.8.jar ├── jackson-core-2.9.8.jar ├── jackson-databind-2.9.8.jar └── logback-core-1.3.0-alpha4.jar Download fastjson-1.2.58.jar...

dicozorus

Dicozorus Dicozorus is a tool to generate and maintain web wordlists. It eliminates the overhead of managing multiple wordlists by storing paths enriched with metadata in a local SQLite database. Just want a great wordlist without the tool? Skip the setup and use lazy.txt. Why Dicozorus? Standard...