eko2020-challenge

Faraday Challenge for Ekoparty 2020. Instructions to run it: git clone https://github.com/infobyte/eko2020-challenge cd eko2020-challenge pip3 install flask flask-mail python hello.py...

alexafaraday

https://www.faradaysec.com https://github.com/infobyte/faraday Amazon Alexa Faraday Skill Using Flask-ASK and VMware REST API's This is the GitHub Repository for Amazon Echo, Python Flask/Flask-ASK, and Faraday API's blogpost and subsequent updates. We leverage Flask-Ask to interact with the Amaz...

qu1ckdr0p2

À propos Hébergez rapidement des payloads et des binaires de post-exploitation via HTTP ou HTTPS. Conçu pour être utilisé lors d'examens comme OSCP / PNPT ou de CTF comme HTB, etc. Les pull requests et les issues sont les bienvenues, ainsi que toute contribution. Qu1ckdr0p2 est doté d'une...

cve-2021-21980-mock-server

Clippy of the Dead - CVE-2021-21980 testing environment and Nuclei template This repository contains a high-confidence Nuclei template to detect CVE-2021-21980 vSphere Web Client path traversal and a small mock environment that reproduces the vulnerable behavior for safe local testing. Files:...

patch-checker

PatchChecker Ceci est la base de code pour le service fonctionnant sur : https://patchchecker.com. En bref, PatchChecker est une application web fonctionnant avec Flask qui fournit une sortie similaire à celle de Watson. Cependant, en utilisant PatchChecker, il n'est pas nécessaire d'exécuter un...

poastal

Poastal - l'outil OSINT pour emails Poastal est un outil OSINT pour emails qui fournit des informations précieuses sur n'importe quelle adresse email. Avec Poastal, vous pouvez facilement saisir une adresse email et il répondra rapidement à plusieurs questions, vous fournissant des informations...

flask-session-cookie-manager

Décodeur/Encodeur de cookie de session Flask Auteur original : Wilson Sumanang Auteur des corrections et améliorations : Alexandre ZANNI Importé depuis saruberoz.github.io Dépendances Python 2 ou Python 3 itsdangerous Flask Installation Paquet BlackArch Linux pacman -S...

cve-2016-5699-jinzheng-sha

cve-2016-5699-report Reading Course Report This repo references an example. simple-client.py is a Python script to make HTTP requests to the URL passed from a command argument. simple-server.py uses Flask to construct a simple HTTP server to print the headers of received requests. Set Up Install...

skf-flask

ANCIEN et archivé Security Knowledge Framework Veuillez noter qu'il s'agit de la version archivée de SKF, nous travaillons actuellement à la construction d'un tout nouveau Security Knowledge Framework. Pour plus de mises à jour, veuillez visiter ce dépôt github :...

RedTeamSimmer

RedTeamSimmer Интерфейс, о котором вы всегда мечтали для Atomic Red Team Веб-платформа эмуляции противника и оркестрации тестов Atomic Red Team. Обзор RedTeamSimmer — это открытая веб-платформа эмуляции противника, предоставляющая современный интерфейс для оркестрации тестов Atomic Red Team в...

blindxss-lite

blindxss-lite Легковесный сервер-коллектор и сервер полезных нагрузок для Blind XSS межсайтового скриптинга, построенный на Flask. Он отдаёт JavaScript-полезную нагрузку, которая собирает данные браузера жертвы cookies, localStorage, фрагменты DOM и т. д. и пересылает их на панель управления на...

DevHub-HTB-Walkthrough

DevHub – Прохождение HTB Medium Linux Машина: DevHub Сложность: Medium ОС: Linux Темы: CVE-2026-23744, Chisel-туннелирование, Jupyter, Flask API, повышение привилегий до root 📌 1. Разведка nmap -sC -sV devhub.htb Результат: Порт 22 SSH Порт 80 HTTP Порт 6274 MCPJam Inspector 📌 2. Настройка файла...

android_poc_tester

androidenv — Dockerized Android CTF POC Runner A platform fo...

cybermeowfia-termux

CyberMeowfia Termux Root Manager Termux privilege escalation tool and Root permission manager based on CVE-2026-43501 kernel vulnerability. Features CVE-2026-43501 kernel vulnerability exploitation Flask web management interface 25 APIs HMAC-SHA256 token authentication Process management, file...

not-slithering-anywhere

Overview Not Slithering Anywhere is the Python3 version of our Not Go-ing Anywhere vulnerable application. It is meant to demonstrate a number of security issues commonly found in Python applications, as well as serve as the basis for static & dynamic tool testing grounds. Getting started 1. Setu...

pyrasp

Что такое PyRASP ? PyRASP — это пакет Runtime Application Self Protection самозащита приложения во время выполнения для веб-серверов на Python Flask, FastAPI, Django, aiohttp, веб-шлюзов WSGI и ASGI и бессерверных функций AWS Lambda, Azure и Google Cloud Functions. Он защищает от основных атак,...

clickfix-simulator-2025

ClickFix Training Tool A lightweight, self-hosted simulation tool for "ClickFix" type social engineering attacks. Disclaimer This tool is for AUTHORIZED SECURITY AWARENESS TRAINING ONLY. Unauthorized use of this tool to target systems or users without explicit permission is illegal and unethical...

CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1

CVE-2026-11107 – Insecure Direct Object Reference with Predictable UUIDv1 Program Code Python Flask idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + MAC users = struuid.uuid1:...

CVE-2026-27641-Flask-Reuploaded

CVE-2026-27641 is a critical security vulnerability affecting versions of the Flask-Reuploaded library. It allows remote attackers to achieve arbitrary file writes Versions affected: 1.5.0 To test the vulnerability: python3 -m venv flaskreuploadedvenv In flaskreuploadedvenv: pip install...

CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE

CVE-2026-4040 – Race Condition in File Upload Leading to RCE Program Code Python Flask uploadserver.py - File upload with race condition from flask import Flask, request import os, tempfile, time, threading app = Flaskname UPLOADDIR = '/tmp/uploads' os.makedirsUPLOADDIR, existok=True...