Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

CVE-2024-38526

CVE-2024-38526 - Polyfill Scanner: x Mass Urls Scanner CDN polyfill.io, ранее скомпрометированный для распространения вредоносного кода, теперь защищен последним исправлением в pdoc 14.5.1. Обзор Обнаруживать потенциальные проблемы Автоматизировать повторяющиеся задачи с легкостью Возможности...

RedGhost

RedGhost Linux post exploitation framework designed to assist red teams in persistence, reconnaissance, privilege escalation and leaving no trace. Payloads Function to generate various encoded reverse shells in netcat, bash, python, php, ruby, perl SudoInject Function to inject sudo command with...

pyxamstore

Xamarin AssemblyStore Explorer pyxamstore This is an alpha release of an assemblies.blob AssemblyStore parser written in Python. The tool is capable of unpack and repackaging assemblies.blob and assemblies.manifest Xamarin files from an APK. Installing Run the installer script: root@kitploit:...

pyxamstore

Xamarin AssemblyStore Explorer pyxamstore Ceci est une version alpha d'un analyseur assemblies.blob AssemblyStore écrit en Python. L'outil est capable de dépaqueter et de rempaqueter les fichiers assemblies.blob et assemblies.manifest Xamarin à partir d'un APK. Installation Exécutez le script...

CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when successfully performing the bypass, and not perform any...

Review.CVE-2023-5612

CVE-2023-5612 – SSRF в GitLab через URL вебхуков PoC и анализ 📌 Обзор CVE CVE-ID: CVE-2023-5612 Серьёзность: Высокая базовая оценка CVSS: 8.1 Тип: Server-Side Request Forgery SSRF Компонент: Вебхуки GitLab CE/EE Затронутые версии: GitLab CE/EE " \ --data-urlencode "url=http://127.0.0.1:8888" ...

sharem

SHAREM Welcome to SHAREM! SHAREM was presented at DEFCON 31 in "Game-Changing Advances in Windows Shellcode Analysis" and Black Hat USA Arsenal. A companion Ghidra plugin was made available separately from Trellix, courtesy of Max Kersten. Thus, you can extend the power of SHAREM to Ghidra, if yo...

MHDDoS

MHDDoS DDoS Testing Toolkit · 57 Methods · Python 3 For authorized testing and educational use only. Do not attack systems, websites, or networks without the owner's explicit permission. Download · Features · Installation · Docker · Documentation · Community · Hosting ⚠️ Important Notice !CAUTION...

DRUPAL-CONTRIB-2026-131

This module enables you to add dynamic caption support to PhotoSwipe image galleries. The module doesn't sufficiently sanitize user-supplied input such as image alt tags in its dynamic caption script, leading to a Cross-Site Scripting XSS vulnerability. This vulnerability is mitigated by the fact...

netwave-dosvulnerability

Le serveur de caméra IP Netwave vulnérable à un déni de service non authentifié via une seule requête POST volumineuse sur n'importe quel firmware. CVE| Description ---|--- CVE-2018-6479| Vulnérabilité de déni de service distant non authentifié CVSS| Score| Détails ---|---|--- 3| 7.3|...

abrt_root

Aperçu Ce dépôt contient un PoC d'exploitation pour CVE-2025-12744, une vulnérabilité d'élévation de privilèges locaux dans les installations par défaut de Fedora Linux versions 43 et inférieures, Desktop et Server. La faille provient d'une injection de commande dans le démon ABRT, permettant à...

php-jpeg-injector

php-jpeg-injector Injects php payloads into jpeg images. Related to this post. Use Case You have a web application that runs a jpeg image through PHP's GD graphics library. Description This script injects PHP code into a specified jpeg image. The web application will execute the payload if it...

php-jpeg-injector

php-jpeg-injector Injecte des payloads PHP dans des images JPEG. Lié à ce post. Cas d'utilisation Vous avez une application web qui traite une image JPEG via la bibliothèque graphique GD de PHP. Description Ce script injecte du code PHP dans une image JPEG spécifiée. L'application web exécutera l...

Blisqy

1. Blisqy Blisqy is a tool to aid Web Security researchers to find Time-based Blind SQL injection on HTTP Headers and also exploitation of the same vulnerability. The exploitation enables slow data siphon from a database currently supports MySQL/MariaDB only using bitwise operation on printable...

CVE-2024-25175

CVE-2024-25175 XSS réfléchi via le fractionnement de réponse HTTP Description : L'exploitation de cette vulnérabilité peut entraîner l'exécution de code JavaScript dans le navigateur de la victime Cross-Site Scripting lorsqu'elle suit un lien spécialement conçu. La vulnérabilité provient du fait...

mongobleed-exploit-CVE-2025-14847

🩸 MongoBleed - CVE-2025-14847 Laboratoire de Recherche en Sécurité CVE-2025-14847 | CVSS 8.7 Élevé | Divulgation de mémoire non authentifiée CVE-2025-14847 , surnommé MongoBleed , permet à des attaquants distants non authentifiés d'exfiltrer la mémoire tas non initialisée en exploitant la logique...

wcfproxy

Build You can either compile the tool once and then use the resulting binary or you can run it "like a script" the Go toolchain will compile it on the fly. For development, the latter option is convenient. For productive use, it is recommended to compile it once from the cli directory and use the...

CVE-2024-37085

CVE-2024-37085 Неаутентифицированная загрузка оболочки до полного администратора на ESXi-гипервизорах, присоединенных к домену. Скачать ESXIVORTEX Детали: Обход аутентификации, который приводит к загрузке оболочки в контексте vpxuser, что дает полные административные права на ESXI-гипервизорах,...

pyCobaltHound

Quick summary pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Bloodhound. pyCobaltHound strives to assists red team operators by: Automatically querying the BloodHound database to discover escalation paths opened ...