WhoAmIMailBot

Who Am I Mail Bot What is it? Who Am I Mail Bot is a service to mask your e-mails. It was inspired by Blur, where you can create an alias for your e-mail and use it to signup on applications. The problem with Blur is that all e-mails pass trough their infraestructure and I don't need/want anybody...

huntglyph

huntglyph — Detect homograph attacks Homograph attacks leverage the visual similarity of characters from different writing systems e.g., Latin 'a' vs. Cyrillic 'а' to spoof domain names, filenames, or other identifiers, tricking users into believing they are interacting with a legitimate source...

HTB-TwoMillion-Writeup

HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386 HackTheBox — TwoMillion Writeup HackTheBox — TwoMillion Writeup Machine Info Field| Details ---|--- Name| TwoMillion Difficulty| Easy OS| Linux IP| 10.10.11.221 CVE| CVE-2023-0386 Summary...

soc-faker

soc-faker soc-faker is used to generate fake data for use by Security Operation Centers, Information security professionals, product teams, and many more. Getting Started soc-faker works with Python 3.6 or greater. You can install soc-faker using pip as well as cloning this repository directly. A...

watcher

Anti Reverse Shell Hello my name is themoon also known shalev, i created this project to help people who run servers with lower security. You can use this project to protect your computer from attackers who may try to reverse shell your computer Informations on this project You can view how this...

LittleCorporal

LittleCorporal LittleCorporal: A C Automated Maldoc Generator C:\LittleCorporal\bin\ReleaseLittleCorporal.exe C:\beacon.bin explorer.exe . . . . | | ||/ |/ || | \ \ | | | | | \ \ \ | / / \ / / \ \ \ / \ \ \ | | | || || | | | | |\ /\ \ | / | | // | | | ||| || |/\ \ //|| | / /|| // / / /...

CVE-2024-4577

🚀 CVE-2024-4577: PHP CGI Argument Injection Scanner and Exploit 🛡️ Overview CVE-2024-4577 is a critical vulnerability affecting PHP applications that utilize the Common Gateway Interface CGI. This tool serves as both a scanner and an exploit , enabling cybersecurity professionals to: Detect PHP CG...

CVE-2024-7120

Raisecom Devices Command Injection CVE-2024-7120 Proof of concept! Overview A command injection vulnerability has been identified in the RAISECOM Gateway devices, affecting models MSG1200, MSG2100E, MSG2200, and MSG2300. This vulnerability allows remote attackers to execute arbitrary commands on...

GuardModel

GuardModel Block malicious AI models in your pipeline with one line of YAML. GuardModel is a GitHub Action that automatically scans ML model files for malicious code, vulnerabilities, and security risks in CI/CD pipelines. It blocks dangerous models before they reach production by detecting pickl...

decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

CVE-Exploit-Research-Development

🔐 SSH Exploit Tool Educational Use Only 📌 Description This tool demonstrates exploitation of: CVE-2008-0166 CVE-2008-1657 It connects to vulnerable SSH services and provides: Persistent interactive shell Command execution logging Automatic PDF & DOCX report generation ⚙️ Features Persistent shell...

doublehop

Doublehop This tool aims to assist in using PowerShell Remoting / WinRM to execute PowerShell commands on remote hosts through WinRM double hop technique. This tool assumes you have internal network and CLI access. Usage doublehop Usage: -c string Command we are executing. -j string Host we are...

cve-2021-31630

This script automatically exploits vulnerability in OpenPLC Web Server v3 You will be able to create an automatic Rever Shell with the server without having to use manual techniques. CVE-2021-31630 Detail Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code...

pftriage

pftriage pftriage is a tool to help analyze files during malware triage. It allows an analyst to quickly view and extract properties of a file to help during the triage process. The tool also has an analyze function which can detect common malicious indicators used by malware. Dependencies pefile...

hexora

hexora Hexora is a static analysis tool designed to detect malicious and harmful patterns in Python code. It combines a rule-based static analysis engine with a machine-learned model that scores entire source files to classify them as malicious or benign. It can be used to: Audit project...

CVE-2019-15107

Unauthenticated RCE via Webmin Backdoor CVE-2019–15107 Summary CVE: CVE-2019–15107 Affected Version: Webmin it will open an shell for you . Note: For versions 1.900–1.920, the “expired password changing” feature must be enabled for the backdoor to trigger. Version 1.890 is vulnerable in its defau...

CVE-2025-31486-Simulation

Vite Path Traversal Lab CVE-2025-31486 A hands-on, containerized lab environment to simulate and exploit the Path Traversal vulnerability in Vite's development server, identified as CVE-2025-31486. 📖 About The Vulnerability This lab demonstrates a significant Path Traversal vulnerability found in...

sast-scan

Introduction ███████╗ ██████╗ █████╗ ███╗ ██╗ ██╔════╝██╔════╝██╔══██╗████╗ ██║ ███████╗██║ ███████║██╔██╗ ██║ ╚════██║██║ ██╔══██║██║╚██╗██║ ███████║╚██████╗██║ ██║██║ ╚████║ ╚══════╝ ╚═════╝╚═╝ ╚═╝╚═╝ ╚═══╝ Scan is a free open-source security tool for modern DevOps teams. With an integrated...

CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC

CVE-2024-25600 — WordPress Bricks Builder RCE PoC Unauthenticated remote code execution vulnerability in WordPress Bricks Builder id uid=33www-data gid=33www-data groups=33www-data References CVE-2024-25600 Bricks Builder Security Advisory Wordfence writeup Credits Discovery: Snicco / Calvin Alka...

Unihackers---CVE-2025-55182-

ITALIAN GANG React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution...