1813 matches found
struts-pwn
struts-pwn An exploit for Apache Struts CVE-2017-5638 Usage Testing a single URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Testing a list of URLs. python struts-pwn.py --list 'urls.txt' -c 'id' Checking if the vulnerability exists against a single URL...
team-teso
team-teso TESO-CVS 于 2005 年（柏林）在 THC 的 10 周年派对上 赠予 THC。 此处发布仅用于教育目的。尽情享用。 部分物件从未存放在 CVS 中，已经遗失在时间的长河里： TESO 的 ssh 漏洞利用 许多（哦，太多太多了！）OpenBSD 漏洞利用（包括世界上首个针对 OpenBSD 的远程 0day） Stacheldraht 与 Blitzkrieg 太多照片（ 证据，咳咳 ）已被扔进大海。 太多从未被讲述的故事。 ...（如果你有任何这些“遗失”的物件，请发送 PR） https://www.team-teso.net...
ChromSploit-Framework
ChromSploit Framework v3.0 Professional Security Research Platform for Browser Vulnerability Analysis Multi-CVE exploitation chains with advanced obfuscation, intelligent detection, and comprehensive analytics Overview ChromSploit Framework is a cutting-edge educational security research tool...
IoTGoat
OFFICIAL REPO HAS BEEN MOVED TOhttps://github.com/OWASP/IoTGoat Description The IoTGoat Project is a deliberately insecure firmware based on OpenWrt and maintained by OWASP to educate users how to test for the most common vulnerabilities found in IoT devices. The vulnerability challenges are base...
hashcobra
hashcobra hashcobra Hash Cracking tool. Description This tool uses a new method to crack hashes. With the help of rainbow tables concept this tool generates rainbow tables from wordlists to heavily optimize the cracking process. Usage root@kitploit: $ ./hashcobra -H --== hashcobra by sepehrdad ==...
Hack Tools
Hack Tools This repository contains a collection of 200+ tools and resources that can be useful for red teaming activities. Some of the tools may be specifically designed for red teaming, while others are more general-purpose and can be adapted for use in a red teaming context. Warning The...
apache-exploit-CVE-2021-42013
apache-exploit-CVE-2021-42013 Exploit con búsqueda integrada de Shodan Por favor, úsalo solo con fines educativos!...
cve-2016-7255_x86_x64
cve-2016-7255 x86, x64 将CVE-2016-7255移植到x86用于教育目的。 参考代码 https://github.com/rlarabee/exploits/tree/master/cve-2016-7255...
CVE-2023-36845
注意 ： !CAUTION ⚠️ 免责声明：重要：此脚本仅供教育、道德测试和合法用途使用。请勿在未经明确许可的系统或网络上使用。未经授权访问计算机系统和网络是违法的，被发现进行未经授权活动的用户将承担法律责任。作者对此脚本的误用造成的任何损害概不负责。...
kassandra_x33fcon_2026
kassandrax33fcon2026 This repository contains the PoC tool presented at x33fcon 2026, along with the associated presentation slides. The content is made available for research and educational purposes...
mip22
mip22 mip22 v3.3 mip22 is a advanced phishing tool 83 default websites, clone any site with manual method, add any site with customize method, mask link with subdomains, url shortener, audio notice for view the credentials live, music in background etc... The program is made for educational...
CVE-2026-24118
⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in controlled...
botnet-hackpack
SIMPLE C&C BOTNET This hackpack will walk you through implementing a basic framework that fundamentally characterizes a botnet. It might help if you've worked with C before. If you liked this tutorial, be sure to star this repo! Note: Don't use anything you learn here for malevolent purposes. Thi...
libvshadow
libvshadow is a library to access the Volume Shadow Snapshot VSS format. The VSS format is used by Windows, as of Vista, to maintain copies of data on a storage media volume. Project information: Status: alpha Licence: LGPL-3.0-or-later Also see: OSDFC 2012: Paper - Windowless Shadow Snapshots:...
falla
FAllA A search-engine-cli-scraper for more than 15 search engines, including Google. duckduckgo, Bing, Ask, etc... NOTE: For educationnal purpose, am not responsible of the bad use of this tool ! Requirements Python 3.x Docker-CE Not required for all search-engine, just few of them How to install...
slmail-exploit
这些 Python 脚本仅供教育用途！ ⚫ 使用示例： python exploit.py 192.168.0.100 ip victm 不要忘记在你的机器上打开端口...
day01-sessionreaper-lab
Día 1 — Laboratorio Vulnerable estilo SessionReaper Educativo Este es un pequeño laboratorio que simula la idea central reportada para CVE-2025-54236 “SessionReaper”: validación incorrecta de JSON anidado que conduce a rutas de código peligrosas. Esto no es Magento/Adobe Commerce; es una réplica...
PhoneNumber-OSINT
PhoneNumber-OSINT Una herramienta OSINT para recopilar información sobre números de teléfono Fue creada por Spider Anongreyhat Anonspidey Captura de pantalla Cómo instalar PhoneNumber-OSINT en Termux: root@kitploit: apt update && apt upgrade apt install python3 apt install git apt install pip git...