Hash-Buster

Hash Buster Why crack hashes when you can bust them? Features Automatic hash type identification Supports MD5, SHA1, SHA256, SHA384, SHA512 Can extract & crack hashes from a file Can find hashes from a directory, recursively Multi-threading Insallation & Usage Note: Hash Buster isn't compatible...

CyberChef

CyberChef The Cyber Swiss Army Knife CyberChef is a simple, intuitive web app for carrying out all manner of "cyber" operations within a web browser. These operations include simple encoding like XOR and Base64, more complex encryption like AES, DES and Blowfish, creating binary and hexdumps,...

cloudflared

Cloudflare Tunnel client Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin e.g. a webserver. Cloudflare attracts client requests and sends them to...

UniversalDVC

Universal Dynamic Virtual Channel connector for Remote Desktop Services UDVC Terminal Services or Remote Desktop Services are offering many hidden features for those who want to dig deeper. One of these services is the Dynamic Virtual Channel that enables us to communicate over an open RDP...

RpcAuthnLevelPrivacyEnabled

Managing deployment of RPC printer association changes for CVE-2021-1678 KB4599464 Windows printer sharing error download and run: https://github.com/alvaciroliveira/RpcAuthnLevelPrivacyEnabled/blob/main/RpcAuthnLevelPrivacyEnabled.reg CREDITS TO:...

DanderSpritz_lab

DanderSpritz Lab Purpose The goal of DanderSpritz lab is to allow researchers and defenders to quickly stand up a fully functional version of DanderSpritz - The Equation Group's Post exploitation tool-set and a Windows Server 2008 Domain and client as targets. The Windows target have some reverse...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell — CVE-2026-109618 / CVE-2026-109619 modphp / PHP-F...

LogMePwn

LogMePwn LogMePwn is a fully automated, multi-protocol, reliable, super-fast scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability. Tool Highlights Inherent support for automatic Canary Tokens generation using emails or webhooks. Multi-protocol support: HTTP, IMAP, SSH,...

CVE-2024-4577

lol CVE-2024-4577 1. exploit command RCE value python3 cek.py --target http://target/index.php --ls --dir /path/to/directory python3 cek.py --target https://target/index.php --dir /path/to/directory python3 cek.py --target https://target/index.php --cat /path/to/directory find writable dir python...

apache__nifi_CVE-2022-33140_1-16-22

Apache NiFi Status Resources Contacts !Track Issueshttps://img...

SwishDbgExt

SwishDbgExt SwishDbgExt is a Microsoft WinDbg debugging extension that expands the set of available commands by Microsoft WinDbg, but also fixes and improves existing commands. This extension has been developed by Matt Suiche @msuiche – feel free to reach out on [email protected] ask for mor...

CVE-2026-76461

⚡ CVE-2026-76461 - Critical SQL Injection A critical, remotely exploitable SQL injection vulnerability in Cisco Secure Email Gateway's email parsing...

Weblogic

English｜ 中文 Research topic on WebLogic vulnerabilities Weblogic CVE-2023-21931 vulnerability exploration technique: post-deserialization exploitation Abstract：In recent years, Weblogic deserialization vulnerabilities have been discovered and focused on the triggering point of deserialization...

hoper

Hoper It shows all the hops that makes a url you specify to reach its endpoint. For example if you want to see the entire trip by email URL or like a URL shorten. Hoper returns you all URLs redirections. Installation $ gem install hoper Usage Type in your command line: $ hoper url Development Aft...

e-cology

Weaver e-cology OA Beanshell Component Remote Code Execution Windows Linux Notes Detect the target system's os.name if the target system is Windows, executing commands such as set requires manually typing cmd.exe /c set Use Unicode to bypass the exec filter on some sites. Payload...

loguccino

A Log4J2 CVE-2021-44228 Vulnerability Scanner and Patcher Links to download the latest version: Linux x64 with glibc2.17+ RHEL7+| Windows & all other platforms ---|--- Download Linux binary| Download Java .jar 🚑 Note: SAS customers looking to patch their SAS 9.4 or SAS Viya 3.x deployments should...

pfsense-l2tp-radius-mpd

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-l2tp-radius-mpd pfsense-l2tp-radius-mpd Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org vpn.inc interpolates "$radiussecret" quoted but unescaped. PPP client uses getmpdstr; servers...

telegram-c2

Telegram C2 Command and control a server via telegram bots. Installation Tutorial Video Create a telegram bot Edit main.py, set BOTAPIKEY to the bot's api key and telegramuserid to your telegram id Install the following dependencies pip install -r requirements.txt Compile to standalone binary for...

webos-downloadmanager-root

webos-downloadmanager-root Candidate root chain on LG webOS T...

CVE-2021-24307-all-in-one-seo-pack-admin-rce

Admin PHP unserialization RCE in All in one SEO pack CVE-2021-24307 Simple PoC of an admin authenticated RCE in AISEO = 4.1.0.1 provided as an example. Full write-up here: https://darkpills.com/php-unserialize-write-up-with-admin-rce-in-all-in-one-seo-pack-cve-2021-24307/ Usage: php exploit.php u...