CVE-2023-51764

CVE-2023-51764 Postfix SMTP Smuggling - Expect Script POC send an email that is legitimate, but inside the email there is many others emails different senders, recipients, subjet, etc. The initial email is check for SPF/DKIM/DMARC, the others inside are not ! usage: ./cve-2023-51764.sh mx.fqdn po...

CVE-2018-8718

Exploit Title : Jenkins mailer plugin CSRF Vulnerability - Send CSRF MAIL Date : 2018/06/05 Exploit Author : Yeom Geun Cheol Vendor Homepage : https://jenkins.io/ Software Link : https://updates.jenkins.io/download/plugins/mailer/1.20/mailer.hpi Version: Below Version 1.20 1.1 1.20 Tested on :...

CVE-2023-23397

CVE-2023-23397 Outlook Privilege Escalation Proof of Concept for CVE-2023-23397 in Python Quick and easy "proof of concept" in Python for the Outlook CVE that affects Microsoft Office/365 products. Usage 1. Install pywin by running pip install pywin32 2. Start a SMB server on the attacker machine...

Camelishing

Camelishing Social Engineering Tool Camelishing Social Engineering Tool Python 3x Contact !CONTACT! | Coded Abdulaziz ALTUNTAŞ | | Email: [email protected] | | Github: github/azizaltuntas | | Twitter: @esccopyright | Features 1-Bulk email sending 2-Basic Python Agent Creator 3-Office Excel...

rspamd

Introduction Rspamd is an advanced spam filtering system and email processing framework that allows evaluation of messages by a number of rules including regular expressions, statistical analysis and custom services such as URL black lists. Each message is analysed by Rspamd and given a verdict...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

spamscanner

A spam filter for Node.js, the command line and mail servers. It catches spam, phishing, scams and malware in any language, explains every decision, and can ask a language model about close calls. spamscanner.net · Getting started · Documentation Features A classifier that reads every language...

CVE-2019-13051

Pi-Hole 4.3.2 Command Injection & PrivEsc CVE-2019-13051 Pi-Hole version 4.3.2 contains a patch to this vulnerability:https://github.com/pi-hole/AdminLTE/pull/974 A big thanks to the Pi-Hole dev team for their awesome project and for making it so easy to report this vulnerability! Executive Summa...

CVE-2024-21378

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🛡️ CVE-2024-21378...

CVE-2024-2876

CVE-2024-2876 - SQL Injection Vulnerability in Email Subscribers by Icegram Express Overview CVE-2024-2876 is a critical security vulnerability found in the "Email Subscribers by Icegram Express" plugin for WordPress. This vulnerability affects versions up to and including 5.7.14 and poses...

CVE-2023-7028

CVE-2023-7028 | Account-Take-Over Gitlab Disclamer This code is a proof of concept of the vulnerability, I'm not pushing anyone to use it on gitlab instances they don't own. This tool has been developed for research and educational purposes only and I will not be held responsible for any use you...

evil-winrar

eval-winrar evil-winrar,cve-2023-38831 vulnerability exploitation and social engineering attack framework evil-winrar, csv-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework Introduction evil-winrar is a winrar csv-2023-38831 vulnerability exploitation and social...

ARP-Spoof-Detector

/\ | | \ / | / | | \ | | | | / \ | | | | | | | | | | | | | | | | / /\ \ | /| / \ | ' \ / \ / | | | | | |/ \ / / | / | '| / | | \ | | | | | | | | | || | / || / | || | | // \| \| |/| ./ / /|| |/ |\||\/|| | | || Description ARP Spoof Detector Script that detects ARP Spoofing attacks on...

pyfiscan

pyfiscan About Pyfiscan is free web-application vulnerability and version scanner and can be used to locate out-dated versions of common web-applications in Linux-servers. Example use case is hosting-providers keeping eye on their users installations to keep up with security-updates. Fingerprints...

CVE-2024-21413

CVE-2024-21413 - Critical Remote Code Execution Vulnerability in Microsoft Outlook Setup 1. Create a config.ini file in the same directory as the script with the following format: emailcredentials senderemail = [email protected] senderpassword = yourapppassword smtpserver = smtp.gmail.com...

LinkedInDumper

LinkedInDumper Python 3 script to dump company employees from LinkedIn API 💬 Description LinkedInDumper is a Python 3 script that dumps employee data from the LinkedIn social networking platform. The results contain firstname, lastname, position title, location and a user's profile link. Only 2 A...

CVE-2019-18818

CVE-2019-18818 Usage : url Reference : https://vulners.com/cve/CVE-2019-18818 https://thatsn0tmysite.wordpress.com/2019/11/15/x05/...

OSINT-with-LLM

POC : OSINT with LLM This repository demonstrates domain, IP, and email reconnaissance with LLM-powered security reporting.. Overview The project is divided into two main components : 1. Recon Modules 2. LLM Analysis and reporting Recon Modules Purpose Gathering information about an ip, domain or...

Email-Extract

Email-Extract - Tool for extracting emails from enumerated websites! UPDATE : Converted to CLI tool, added format option to format lists other than dirb generated ones, Email-Extract is a simple tool I wrote to help extract emails from websites for OSINT research. Simply enumerate it with a commo...