CyberClass

CyberClass This repository contains educational resources for Class'Code CyberClass. Files tree 📦CyberClass ------------------------------------ Root directory ┣ 📂docs --------------------------------------- Website sources ┃ ┣ 📂assets ----------------------------------- General assets logo,...

zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to use this repo in...

xortigate-cve-2023-27997

xortigate-cve-2023-27997 Exploit for xortigate CVE-2023-27997. It is not usable "as-is" and serves educational purposes. Information Please refer to the blogpost for additional details. This is a POC that demonstrates the bug, nothing more. Example...

DamnVulnerableCryptoApp

Why? If you try to learn a little bit more about crypto, either because you want to know how the attacks work or just because you want to do safe code, you end up diving really fast into the math behind the algorithms, and for a lot of people this is a NO. This project was creat...

CVE-2022-2588

CVE-2022-2588 Code adapted for one cpu, and with a vagrant file provided to boot up a vulnerable machine used for educational purposes. To create a vulnerable machine, you need to have Vagrant installed on your machine, then execute on the repository root: Vagrant up Wait for installation and...

CVE-2026-20841-PoC

🛡️ CVE-2026-20841-PoC - Simple Proof of Concept Tool 📝 What is CVE-2026-20841-PoC? This application is a simple Proof of Concept PoC tool designed to demonstrate the behavior of the security issue referenced by CVE-2026-20841. It helps users understand the impact of this specific vulnerability in ...

MOVEit_CVE-2023-34362_IOCs

MOVEit CVE-2023-34362 IOCs More information on Deep Instinct's blog site. Disclaimer The code provided is offered as-is and is intended for educational or informational purposes only. The user assumes all responsibility for the use of this code and any consequences that may arise from its use. Th...

gmailc2

gmailc2 A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the companies block unknown traffic so...

flare-vm

FLARE-VM Welcome to FLARE-VM - a collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a virtual machine VM. FLARE-VM was designed to solve the problem of reverse engineering tool curation and relies on t...

CVE-2020-3452

CVE-2020-3452 CVE-2020-3452 - directory traversal in Cisco ASA and Cisco Firepower Threat Defense This utility is made for educational and ethical testing purposes only. Usage of this script for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey...

OnionSearch

OnionSearch 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! For BTC Donations : 1FHDM49QfZX6pJmhjLE5tB2K6CaTLMZpXZ...

DedSec

DedSec Project Official Website DedSec Project First-setup legal confirmation / Πρώτη εγκατάσταση: bash Setup.sh requires acceptance of the English/Greek legal documents in Important Documents/ before installing anything. Press y or Enter to accept; n to cancel safely and retry later; r for readi...

kubolt

Wat? Kubolt is simple utility for scanning public unauthinticated kubernetes clusters and run commands inside containers Why? Sometimes, the kubelet port 10250 is open to unauthorized access and makes it possible to run commands inside the containers using getrun function from kubelet: // getRun...

ULTIMATE-CYBERSECURITY-MASTER-GUIDE

🛡️ ULTIMATE CYBERSECURITY MASTER GUIDE Professional Cybersecurity Knowledge Base · Red Team · Blue Team · Purple Team Compiled from 70+ expert books · 90+ PNWC internal documents · custom tools & scripts Abide by theLegal Terms of Use & Disclaimer for the use and misuse of this repository. "Under...

IoTGoat

OFFICIAL REPO HAS BEEN MOVED TOhttps://github.com/OWASP/IoTGoat Description The IoTGoat Project is a deliberately insecure firmware based on OpenWrt and maintained by OWASP to educate users how to test for the most common vulnerabilities found in IoT devices. The vulnerability challenges are base...

mip22

mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...

Storm0978-RomCom-Campaign

Storm0978-RomCom-Campaign Recent Campaign abusing CVE-2023-36884 Disclaimer The code provided is offered as-is and is intended for educational or informational purposes only. The user assumes all responsibility for the use of this code and any consequences that may arise from its use. The creator...

blackbird

Blackbird Blackbird is a powerful OSINT tool that combines fast username and email searches across more than 600 platforms with free AI-powered profiling. By leveraging community-driven projects like WhatsMyName, it ensures low false positive rates and high-quality results. Features include smart...

React2Shell-CVE-2025-55182

$$\ $$\ $$$$$$$\ $$\ $$\ $$$$$$$$\ $$\ $$\ $$$$$$\ $$$$$\ $$$\ $$$ |$$ $$\ $$$\ $$$ |$$ |$$ | $\ $$ |$$ $$\ $$ | $$$$\ $$$$ |$$ | $$ | $$$$\ $$$$ | $$ | $$ |$$$\ $$ |$$ / $$ | $$ | $$$$$$ $$ |$$$$$$$ | $$$$$$ $$ | $$ | $$ $$ $$$$ |$$ | $$ | $$ | $$ $$$ $$ |$$ $$ $$ $$$ $$ | $$ | $$$$ $$$$...

H1R0GH057

Fork of https://github.com/H1R0GH057/Anonymous Note: The following commands are provided strictly for educational purposes only. It is essential to use this information responsibly, ethically, and in compliance with the law. Unauthorized use of any form of cyber-attack tools or scripts is against...