2579568 matches found
Hwacha
Hwacha https://www.n00py.io/2017/12/raining-shells-on-linux-environments-with-hwacha/ Hwacha is a tool to quickly execute payloads on Nix based systems. Easily collect artifacts or execute shellcode on an entire subnet of systems for which credentials are obtained. root@kitploit: $python hwacha.p...
qu1ckdr0p2
关于 快速通过HTTP或HTTPS托管有效载荷和后利用二进制文件。 专为OSCP/PNPT等考试或HTB等CTF比赛设计。 欢迎提交Pull Requests和Issues，也欢迎任何贡献。 Qu1ckdr0p2附带别名和搜索功能。工具位于qu1ckdr0p2-tools仓库中。默认情况下，它会生成一个自签名证书用于--https选项；当Web服务器运行时，优先使用tun0接口，否则使用eth0。 common.ini定义了--search和-u选项中使用的映射别名。 当Web服务器运行时，屏幕上会打印出多个下载执行语句，可直接复制粘贴。 注意...
CVE-2020-8840
CVE-2020-8840: FasterXML/jackson-databind Remote Code Execution Vulnerability 0x00 Introduction jackson-databind is a JSON processing library under the FasterXML project. 0x01 Vulnerability Overview On February 19, NVD released a security advisory disclosing a remote code execution vulnerability...
RED_HAWK
Version 2.0.0 By R3D@0R2H1N A.K.A Tuhinshubhra All in one tool for Information Gathering and Vulnerability Scanning Scans That You Can Perform Using RED HAWK : Basic Scan Site Title NEW IP Address Web Server Detection IMPROVED CMS Detection Cloudflare Detection robots.txt Scanner Whois Lookup...
Exploite-CVE-2023-30212-vulnerability
create a vulnerable Docker environment that is susceptible to CVE-2023-30212 Description Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site...
CVE-2023-22515-Scan
CVE-2023-22515-Scan About This is simple scanner for CVE-2023-22515, a critical vulnerability in Atlassian Confluence Data Center and Server that is actively being exploited in the wild by threat actors in order "to create unauthorized Confluence administrator accounts and access Confluence...
boofuzz
.. image:: https://github.com/jtpereyda/boofuzz/raw/master/artwork/boo-logo-dark.svg :width: 60% :alt: boofuzz 标志 boofuzz：面向人类的网络协议模糊测试 .. image:: https://github.com/jtpereyda/boofuzz/actions/workflows/test.yml/badge.svg?branch=master :target:...
-create-a-vulnerable-Docker-environment-that-is-susceptible-to-CVE-2023-30212
create a vulnerable Docker environment that is susceptible to CVE 2023-30212 Description Docker environment and exploit the CVE-2023-30212 vulnerabilityVE-2023-30212 is a security vulnerability that affects versions of OURPHP prior to or equal to 7.2.0. This vulnerability allows for Cross-Site...
noia
Noia Noia is a web-based tool whose main aim is to ease the process of browsing mobile applications sandbox and directly previewing SQLite databases, images, and more. Powered by frida.re. Please note that I'm not a programmer, but I'm probably above the median in code-savyness. Try it out, open ...
CobaltStrikeParser
CobaltStrikeParser Python parser for CobaltStrike Beacon's configuration Description Use parsebeaconconfig.py for stageless beacons, memory dumps or C2 urls with metasploit compatibility mode default true. Many stageless beacons are PEs where the beacon code itself is stored in the .data section...
CVE-2021-26084_PoC
CVE-2021-26084 PoC | Confluence Server Webwork OGNL injection An OGNL injection vulnerability exists that would allow an authenticated user, and in some instances unauthenticated user, to execute arbitrary code on a Confluence Server or Data Center instance. My fight to locate the entrypoints and...
shakeitoff
shakeitoff A smaller, minimized, and cleaner version of InstallerFileTakeOver aka the zero-day exploit that is a "variation" of CVE-2021-41379 later assigned CVE-2021-43883. This version does not pop a shell like InstallerFileTakeOver. The point of this code was to create a simpler proof of conce...
MAL-2026-15669 Malicious code in kendo-angular-window (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7afbba3466805ffeef8538ad094c6670a5506c0a6c3f7c47b735ebd487c4dda6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PowerPriv
PowerPriv DESCRIPTION A powershell implementation of PrivExchange by @dirkjan original code found here: https://github.com/dirkjanm/PrivExchange/blob/master/privexchange.py Useful for environments on which you cannot run python-based applications, have user credentials, or do not want to drop fil...
Malicious code in @fdr-mar/promos-types (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a485eb1f5ab3e53dbceaad01009e635c83058bafc059feb2411b83fc2aa9640e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in core_main (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 714d7b7f27d891d1e7f811b4dd9e4361b96a2943b00149ad8db153ad501a0ee7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-15671 Malicious code in quartz-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2f763d82e760eded4c7415a92f07bf478beeee2ac94ee8e8af73292194b7f42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in quartz-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2f763d82e760eded4c7415a92f07bf478beeee2ac94ee8e8af73292194b7f42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in kendo-angular-window (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7afbba3466805ffeef8538ad094c6670a5506c0a6c3f7c47b735ebd487c4dda6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...