CVE-2023-46805_CVE-2024-21887

CVE-2023-46805 ثغرة تجاوز المصادقة في المكون الويب لـ Ivanti ICS 9.x و22.x وIvanti Policy Secure تسمح لمهاجم عن بعد بالوصول إلى الموارد المقيدة عن طريق تجاوز فحوصات التحكم. الاستخدام: ./CVE-2023-46805.sh https://fqdn:port ./CVE-2023-46805.sh https://my.vpn.ip:443 ملاحظات: chmod +x CVE-2023-46805....

cirrusgo

CirrusGo A fast tool to scan SAAS,PAAS App written in Go SAAS App Support : salesforce contentful next version Note flag -o output not working install : golang 1.18Ver go install -v github.com/Ph33rr/cirrusgo/cmd/cirrusgo@latest or go install -v github.com/Ph33rr/CirrusGo/cmd/cirrusgo@latest Help...

XIP

XIP Description XIP generates a list of IP addresses by applying a set of transformations used to bypass security measures e.g. blacklist filtering, WAF, etc. asciicast Further explaination on our blog post article Usage python3 xip.py --help Docker alternative Official image You can pull the...

SharpSCOM

SharpSCOM Un outil C pour interagir avec Microsoft System Center Operations Manager SCOM. Cet outil a été testé contre le serveur SCOM version 10.22.10118.0. L'intégration SSPI est fournie via la bibliothèque nsspi de Kevin Thompson antiduh, publiée sous licence BSD-2. Utilisation en ligne de...

TangledWinExec

Tangled WinExec Ce dépôt est destiné à l'investigation des techniques d'exécution de processus Windows. La plupart des PoC portent un nom correspondant à la technique. Projets BlockingDLL : Cet outillage sert à tester le processus de blocage des DLL. Voir README.md. CloneProcess : Ce répertoire e...

radare2

Radare2: Libre Reversing Framework for Unix Geeks Current git master branch is 6.2.4, next release will be 6.2.5. Description r2 is a complete rewrite of radare. It provides a set of libraries, tools and plugins to ease reverse engineering tasks. Distributed under LGPLv3, despite each plugin can...

nuclei-burp-plugin

Nuclei Template Generator Burp Plugin A Burp Suite plugin intended to help with nuclei template generation. Features Template matcher generation Word and Binary matcher creation using selected response snippets from Proxy history or Repeater contexts Multi-line selections are split to separate...

fakelogonscreen

FakeLogonScreen FakeLogonScreen is a utility to fake the Windows logon screen in order to obtain the user's password. The password entered is validated against the Active Directory or local machine to make sure it is correct and is then displayed to the console or saved to disk. It can either be...

CVE-2019-15107-Webmin-RCE-PoC

CVE-2019-15107 Webmin RCE PoC أداة استغلال إثبات المفهوم بلغة بايثون لثغرة CVE-2019-15107 - وهي ثغرة تنفيذ أوامر عن بعد غير مصادق عليها في إصدارات Webmin من 1.890 إلى 1.920. الوصف توجد هذه الثغرة في نقطة النهاية /passwordchange.cgi في Webmin وتسمح للمهاجمين غير المصادق عليهم بتنفيذ أوامر عشوائية...

CVE-2025-55182-exp

CVE-2025-55182-exp 🔥 Aperçu CVE-2025-55182 est une vulnérabilité critique d'exécution de code à distance RCE dans les composants serveur React RSC affectant les applications Next.js utilisant App Router avec Server Actions. La vulnérabilité réside dans le processus de désérialisation du protocole...

cosign

cosign Signing OCI containers and other artifacts using Sigstore! Cosign aims to make signatures invisible infrastructure. Cosign supports: "Keyless signing" with the Sigstore public good Fulcio certificate authority and Rekor transparency log default Hardware and KMS signing Signing with a cosig...

autoharness

AutoHarness Created by Akshat Parikh What is this tool? AutoHarness is a tool that automatically generates fuzzing harnesses for you. This idea stems from a concurrent problem in fuzzing codebases today: large codebases have thousands of functions and pieces of code that can be embedded fairly de...

CVE-2022-28590

CVE-2022-28590 La découverte originale et le PoC manuel proviennent de tuando243 : Une vulnérabilité d'exécution de code à distance RCE existe dans Pixelimity 1.0 via admin/admin-ajax.php?action=installtheme. Ce PoC télécharge un webshell simple pour une exécution de code à distance ultérieure. C...

uafuzz

UAFuzz: Binary-level Directed Fuzzing for Use-After-Free Vulnerabilities Directed Greybox Fuzzing DGF like AFLGo aims to perform stress testing on pre-selected potentially vulnerable target locations, with applications to different security contexts: 1 bug reproduction, 2 patch testing or 3 stati...

uafuzz

UAFuzz: التوجيه الموجه على مستوى البرنامج الثنائي للثغرات من نوع الاستخدام بعد التحرير الاختبار العشوائي الموجه للصندوق الرمادي DGF مثل AFLGo يهدف إلى إجراء اختبار إجهاد على مواقع الهدف المحتملة الحساسة المحددة مسبقًا، مع تطبيقات في سياقات أمنية مختلفة: 1 إعادة إنتاج الثغرات، 2 اختبار التصحيحات، ...

DracOS

What is Dracos Linux ? Dracos Linux www.dracos-linux.org is the Linux operating system from Indonesian , open source is built based on the Linux From Scratch under the protection of the GNU General Public License v3.0. This operating system is one variant of Linux distributions, which is used to...

ghostbuster

Table of Contents Table of Contents Ghostbuster The problem Project Features Installing Ghostbuster Using Ghostbuster Example Output Setting up your AWS accounts Setting up Cloudflare Optional Authors License Ghostbuster Eliminate dangling elastic IPs by performing analysis on your resources with...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

ssh-mitm

SSH MITM v2.3-dev المؤلف: Joe Testa @therealjoetesta نظرة عامة تتيح أداة اختبار الاختراق هذه للمدقق اعتراض اتصالات SSH. يتم تطبيق تصحيح على كود مصدر OpenSSH v7.5p1 يجعله يعمل كخادم وكيل بين الضحية وخادم SSH المقصود؛ يتم تسجيل جميع كلمات المرور والجلسات النصية العادية على القرص. بطبيعة الحال، سيشك...

ci-supplychain-guard

CI Supply Chain Guard A static analysis tool for detecting malicious dependencies in CI/CD pipelines before they're merged into your codebase. Author: Otsmane Ahmed Status: Research Prototype v1.0 Quick Start 1. Clone and install git clone https://github.com/Otsmane-Ahmed/ci-supplychain-guard.git...