Ropper

Ropper You can use ropper to display information about binary files in different file formats and you can search for gadgets to build rop chains for different architectures x86/X8664, ARM/ARM64, MIPS/MIPS64, PowerPC/PowerPC64, SPARC64. For disassembly ropper uses the awesome Capstone Framework...

security checks

🔍 Miner Hunter Crypto-miner detection, removal, and hardening toolkit for Linux servers. Built from real-world incident response — detects miners that hide from ps, top, htop, and btop using rootkit techniques. 📦 Installation git clone https://gitlab.com/abdom.seada/security-checks.git cd...

NextSecureScan

NextSecureScan - Next.js-CVE-2025-29927 Middleware Vulnerability Scanner NextSecureScan is a comprehensive security scanner specifically designed to identify middleware-related authorization bypass vulnerabilities CVE-2025-29927 in Next.js applications. This scanner leverages explicit header...

CVE-2020-14882

CVE-2020-14882 Deployment of Behinder Memory Shell As we all know, CVE-2020-14882 is an unauthenticated vulnerability that allows an attacker to execute arbitrary code on affected WebLogic Server instances. The publicly available PoCs bypass access using illegal characters and then execute comman...

dnscontrol

DNSControl DNSControl is Infrastructure as Code for DNS. It includes a full-featured configuration language Javascript-compatible, plus "plug-ins" that speak to DNS provider APIs such as AWS Route 53, Cloudflare, and Gandi. It can send the same DNS records to multiple providers. It runs anywhere ...

CVE-2021-31630-OpenPLC_RCE

CVE-2021-31630-OpenPLCRCE Exploit for Authenticated Remote Code Execution on OpenPLC v3 Webserver...

cve-2022-30525

CVE-2022-30525 by 1vere$k Rapid7 discovered and reported a vulnerability that affects Zyxel firewalls supporting Zero Touch Provisioning ZTP, which includes the ATP series, VPN series, and the USG FLEX series including USG20-VPN and USG20W-VPN. The vulnerability, identified as CVE-2022-30525,...

CVE-2024-3094-check

CVE-2024-3094 vul check tools This vulnerability allows an attacker to log into the server and execute arbitrary code without passing SSH authentication. For details, please see: https://www.openwall.com/lists/oss-security/2024/03/29/4 use curl -fsSL...

CVE-2025-24893

CVE-2025-24893 Exploit Title: XWiki 15.10.10 - Unauthenticated Remote Code Execution Date: 09/08/2025 Exploit Author: D3Ext Vendor Homepage: https://www.xwiki.org/ Software Link: https://github.com/xwiki/xwiki-platform Version: 15.10.10 Tested on: Kali Linux 2025 CVE: CVE-2025-24893 Explanation...

CVE-2018-3191

Weblogic-CVE-2018-3191 Remote Code Execution Vulnerability weblogic For Docker Environment 0x00 Introduction On October 17, Beijing time, Oracle's Critical Patch Update CPU for October fixed a high-risk WebLogic remote code execution vulnerability CVE-2018-3191. This vulnerability allows an...

CVE-2024-4577-PHP-RCE

CVE-2024-4577-PHP-RCE Project Introduction and Principle The world's first CVE-2024-4577 PHP-CGI RCE exploit utilizing the default PHP environment XAMPP. The world's first CVE-2024-4577 PHP-CGI RCE exploit utilizing the default PHP environment. Sharing original exploit, supports SSRF, supports WA...

CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-

🧨 Overview This repository contains a Proof‑of‑Concept exploit for GNU Inetutils telnetd remote authentication bypass vulnerability. The issue arises because telnetd improperly sanitizes the USER environment variable received via Telnet NEW‑ENVIRON negotiation before invoking /bin/login. By...

SafeLine

SafeLine - Make your web apps secure 🏠 Website | 📖 Docs | 🔍 Live Demo | 🙋‍♂️ Discord | 中文版 🏆 Achievements 👋 INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and...

poc-cve-2024-0132

poc-cve-2024-0132 Reproduce Env: os: ubuntu 22.04 with nvidia driver docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Reproduce Step: run the poc container image Target: Access host files in the container Call docker daemon apis via the docker.sock in the container Reproduce use the prebuilt poc...

omapi-cve-2015-6606-exploit

Simple Exploit for Verification of CVE-2015-6606 This is a simple exploit to verify a code injection vulnerability that exists in the SEEK smartcard service versions 3.1.0 and below CVE-2015-6606, Google internal bug ANDROID-22301786. The vulnerability allows specially crafted Android application...

AndroidDriveSignity

AndroidDriveSignity AndroidDriveSignity is a Python script designed for patching Android kernelARMv8.3 files, enabling the loading of drivers without being subject to various verification checks, specifically signature verifications. This tool aims to facilitate the development and testing proces...

hosting

General Information: This is a setup for a Tor based shared hosting server. It is provided as is and before putting it into production you should make changes according to your needs. This is a work in progress and you should carefully check the commit history for changes before updating. For a...

AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution

AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution CVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5.1.6.0 Authenticated Older versions likely affected https://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution...

CVE-2012-1823

PHP CGI Argument Injection CVE-2012-1823 Description sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to execute arbitrary code by...

trojanizer

TROJANIZER Version release : v1.1 Stable Author : pedro ubuntu r00t-3xp10it Codename: TroiaRevisited Distros Supported : Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 FRAMEWORK DESCRIPTION The Trojanizer tool uses WinRAR SFX to compress the two files input by...