CVE-2021-43798

CVE-2021-43798 Grafana-Arbitrary-File-Read 8.0.0 8.3.0 A vulnerability in Grafana CVE-2021-43798 versions 8.0.0 8.3.0 that allows an unauthenticated attacker to read arbitrary files from the server by leveraging a path traversal aimed towards the /public/plugins/ path to access sensitive files on...

Eden-RAT

Eden-RAT Background While developing EgoDrop and DuplexSpy, I successfully implemented an interactive shell within a C-based GUI application. I then recalled one of my earlier projects that had been suspended due to my limited development experience at the time. Therefore, I decided to revisit an...

fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

Exch-CVE-2021-26855_Priv

Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...

EUVD-2026-90563

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and including, 6.3.316. This is due to the supersaveform AJAX handler performing no capability check — allowing Subscriber-level authenticated users to create ...

CVE-2026-15983

The Super Forms – Drag & Drop Form Builder plugin for WordPress (all versions up to and including 6.3.316 ) is vulnerable to Arbitrary File/Directory Deletion . The root cause stems from a lack of capability checks in the super_save_form AJAX handler, allowing Subscriber-level authenticated users...

XXEinjector

XXEinjector XXEinjector automates retrieving files using direct and out of band methods. Directory listing only works in Java applications. Bruteforcing method needs to be used for other applications. Options: --host Mandatory - our IP address for reverse connections. --host=192.168.0.2 --file...

deepin-linux_reader_RCE-exploit

CVE-2023-50254 - Deepin Linux's default document viewer deepin-reader RCE CVE-2023-50254: PoC Exploit for Deepin-reader RCE that affects unpatched Deepin Linux Desktops. Deepin Linux's default document reader "deepin-reader" software suffers from a serious vulnerability due to a design flaw that...

SMBCrunch

SMBCrunch One of the most time consuming tasks as a red teamer is diving into filesystems and shares, attempting to identify any potentially sensitive information. SMBCrunch allows a red teamer to quickly identify Windows File Shares in a network, performs a recursive directory listing of the...

CVE-2024-58258

CVE‑2024‑58258 – SugarCRM SSRF & Local File Disclosure About This repository provides a proof‑of‑concept for CVE‑2024‑58258 , a SugarCRM 13.0.4 / 14.0.1 vulnerability where user input is parsed as LESS in the /css/preview API, allowing unauthenticated SSRF or local file access. Affected Versions...

Bifrost

Bifrost Command and Control What's Bifrost? Bifrost is an open-source Discord BOT that works as Command and Control C2. This C2 uses Discord API for communication between clients and server. Developed with Python, this C2 have multiples features for post-exploitation. How Bifrost works? As...

CVE-2024-33231

Ferozo Webmail XSS Vulnerability via File Upload CVE-2024-33231 Description Ferozo Webmail version 1.1 is vulnerable to Cross-Site Scripting XSS through the file upload functionality. An attacker can exploit this vulnerability by uploading a specially crafted file containing malicious JavaScript...

prithvi

Prithvi A Report Generation Tool for Security Assessment Usage This project of ours could be used for report generation and its very easy to use. It includes following features 1. We can add Owasp Types and recommendation with details. 2. We can add Multiple Projects and work on it separately. 3...

HackerInfo

HackerInfo install : sudo apt install python3 python3-pip pip3 install termcolor pip3 install google pip3 install optioncomplete pip3 install bs4 pip3 install prettytable git clone https://github.com/Matrix07ksa/HackerInfo/ cd HackerInfo chmod +x HackerInfo ./HackerInfo -h python3 HackerInfo.py -...

qark

Quick Android Review Kit This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the...

Lfi-Space

🪐 LFI-SPACE TOOL 🪐 Written by TMRSWRR Version 1.0.0 All in one tools for LFI VULN FINDER -LFI DORK FINDER Instagram: TMRSWRR 📷 Screenshots 📷 👇 💫 How to use 💫 👇 📒 Read Me 📒 LFI Space is a robust and efficient tool designed to detect Local File Inclusion LFI vulnerabilities in web applications. Thi...

CVE-2024-28995

CVE-2024-28995 Automated Path Traversal & Local File Read Features Version Detection : Retrieves the Serv-U version from the server header. Vulnerability Check : Compares the detected version against a known vulnerable version 15.4.2 or lower. Default Path Testing : Tests predefined paths for bot...

CVE-2021-3129---Laravel-RCE

CVE-2021-3129---Laravel-RCE About The script has been made for exploiting the Laravel RCE CVE-2021-3129 vulnerability. This script allows you to write/execute commands on a website running Laravel , that has "APPDEBUG" set to "true" in its ".env" file...

CVE-2024-36527

CVE-2024-36527 PoC and Bulk Scanner Overview POC for CVE-2024-36527: puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol to read sensitive information from the server. Based on the security advisory published ...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...