powerob

Powerob An on-the-fly Powershell script obfuscator meant for red team engagements. Built out of necessity. This only obfuscates functions and removes found in PowerShell scripts. Roadmap includes bfuscating variables. Pull requests and collaborative welcomed. About This was built out of the need ...

powerob

Powerob Un ofuscador de scripts de PowerShell sobre la marcha diseñado para compromisos de red team. Construido por necesidad. Esto solo ofusca funciones y elimina lo encontrado en scripts de PowerShell. La hoja de ruta incluye ofuscar variables. Se aceptan pull requests y colaboraciones. Acerca ...

WSUS-CVE-2025-59287-RCE

WSUS-CVE-2025-59287-RCE CVE-2025-59287 is a critical CVSS 9.8 remote code execution vulnerability affecting ALL Microsoft Windows Server Update Services aka WSUS, and has been exploited in the wild. The vulnerability exploits insecure deserialization in the GetCookie endpoint, allowing...

hello-ReGrade-security

hello-ReGrade-security A hands-on demo of zero-day discovery withReGrade. You'll point an ordinary test suite at ReGrade, record it against a tiny service, replay it against a second copy of the same service , and use Claude Code + the ReGrade MCP tools to surface a password-hash leak — a...

attack_monitor

Monitor de Ataques Attack Monitor es una aplicación Python escrita para mejorar las capacidades de monitoreo de seguridad de estaciones de trabajo/servidores de Windows 7/2008 y todas las versiones posteriores y para automatizar el análisis dinámico de malware. Modos actuales mutuamente...

attack_monitor

Attack Monitor Attack Monitor is Python application written to enhance security monitoring capabilites of Windows 7/2008 and all later versions workstations/servers and to automate dynamic analysis of malware. Current modes mutually exclusive: Endpoint detection ED Malware analysis on dedicated...

WP-Bricks-Exploit-CVE-2024-25600

BricksRCE Exploiter CVE-2024-25600 — WordPress Bricks Builder Unauthenticated RCE Authorized security assessment tool for CVE-2024-25600 Author: Sudeepa Wanigarathna · Tool: BricksRCE Exploiter v1.0 Main script: cve-2024-25600.py !IMPORTANT Authorized use only. This tool is for security research,...

CVE-2023-23752-Docker

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023-23752 Dockerized Installation Recommended automatic 1. Clone this repo git clone https://github.com/karthikuj/CVE-2023-23752-Docker.git 2. Change directory cd CVE-2023-23752-Docker 3. Run ./setup.sh 4. Open your browser and go to...

CVE-2025-4601

CVE-2025-4601 - WordPress RealHomes Theme = 4.4.0 - Privilege Escalation 🔥 Vulnerability Summary The WordPress theme RealHomes versions = 4.4.0 is vulnerable to a privilege escalation vulnerability. This allows authenticated users with low privileges such as subscribers to escalate their roles to...

SourceWolf

SourceWolf ​ Tested environments: Windows, MAC, linux, and windows subsystem for linux WSL Sponsors Support this project by becoming a sponsor. Checkout these awesome sponsors: Oxylabs provides premium proxies with 100M+ IPs across 195 countries and ready-to-use Scraper APIs. You can use this...

CVE-2026-39987-PoC

CVE-2026-39987 PoC Summary Marimo = 0.20.4 is affected by a pre-authentication RCE vulnerability in the /terminal/ws WebSocket endpoint. The endpoint checks the application mode and terminal support, but does not validate authentication before accepting the WebSocket connection. It then creates a...

CVE-2023-27532

CVE-2023-27532 POC for CVE-2023-27532 affecting Veeam Backup and Replication Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive Summary This POC abuses an unsecured API...

vulnerable-bsr-lab-CVE-2023-6933

CVE-2023-6933 Vulnerability Lab Overview This laboratory environment demonstrates CVE-2023-6933, a critical PHP Object Injection vulnerability in the Better Search Replace WordPress plugin versions ≤1.4.4. Vulnerability Details CVE ID : CVE-2023-6933 CVSS Score : 9.8 Critical Affected Plugin :...

wonitor

Monitor web Monitor de cambios de endpoints web rápido y sin configuración. Para comparar respuestas, una lista seleccionada de encabezados HTTP y el cuerpo completo de la respuesta se almacenan en un archivo local de almacenamiento clave/valor. No se necesita configuración. para aumentar el...

wonitor

web monitor fast, zero config web endpoint change monitor. for comparing responses, a selected list of http headers and the full response body is stored on a local key/value store file. no configuration needed. to increase network throughput, a --worker flag allows to set the concurrency when...

wordlistgen

wordlistgen Generates target specific word lists by searching for endpoints in javascript and appends parameters for Fuzzing with other tools Version 1.0 Install $ go get -u github.com/ethicalhackingplayground/wordlistgen $ go get github.com/003random/getJS Generate wordlist $ echo...

CVE-2023-23752

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023–23752 This readme file provides information about the Joomla Unauthorized Access Vulnerability CVE-2023–23752 and how to detect. This vulnerability allows an attacker to bypass the Joomla access control system and gain unauthorized...

Ofbiz-RCE

📌 Apache OFBiz RCE Exploit CVE-2024-38856 This Python script allows exploiting a Remote Code Execution RCE vulnerability in Apache OFBiz versions 18.12.15 through unauthorized access to the endpoint /webtools/control/forgotPassword/ProgramExport. 🛠️ Description CVE : CVE-2024-38856 Type : Incorrec...

Jrohy-trojan-unauth-poc

Jrohy/trojan Unauthorized modification of administrator password 中文版本Chinese version Jrohy/trojan is an open source project based on Go to automatically deploy trojan services. Its web-side initialization interface /auth/register failed to close properly after user configuration, allowing...

apkleaks

APKLeaks Scanning APK file for URIs, endpoints & secrets. Installation from Pypi from Source from Docker Usage Options Output Pattern Arguments for disassembler License Acknowledments Installation It's fairly simple to install APKLeaks : from PyPi $ pip3 install apkleaks from Source Clone...