BlackWidow

ABOUT: BlackWidow is a python based web application spider to gather subdomains, URL's, dynamic parameters, email addresses and phone numbers from a target website. This project also includes Inject-X fuzzer to scan dynamic URL's for common OWASP vulnerabilities. DEMO VIDEO: BlackWidow Demo...

M365Pwned

M365Pwned 用于通过 Microsoft Graph API 进行 Microsoft 365 攻击的红队工具。 两个 WinForms GUI 工具，用于使用应用程序级 OAuth 令牌枚举、搜索和从 M365 环境中窃取数据 — 无需用户交互。 工具| 目标| 功能 ---|---|--- MailPwned-GUI.ps1| Exchange Online / Outlook| 浏览邮箱、搜索邮件、下载附件、发送冒充邮件 SharePwned-GUI.ps1| SharePoint / OneDrive| 浏览站点和驱动器、搜索文件、预览和下载文档 ⚠️ 免责声明...

covert-control

covert-control Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram using Python to create the files and the listeners. It allows to create text files, images, audio or videos, with the commands in cleartext or encrypted using AES. covert-googledrive.py -...

Invoke-BSOD

Invoke-BSOD For when you want a computer to be done - without admin! BSOD method from here: https://github.com/Leurak/MEMZ/blob/master/WindowsTrojan/Source/Destructive/KillWindows.cL10-L18 Invoke-BSOD.ps1 A PowerShell script to induce a Blue Screen of Death BSOD without admin privileges. Also...

CapTipper

CapTipper v0.3 CapTipper v0.3: http://www.omriher.com/2015/08/captipper-v03-is-out.html CapTipper v0.2: http://www.omriher.com/2015/03/captipper-02-released.html CapTipper v0.1: http://www.omriher.com/2015/01/captipper-malicious-http-traffic.html CapTipper is a python tool to analyze, explore and...

nexfil

NExfil is an OSINT tool written in python for finding profiles by username. The provided usernames are checked on over 350 websites within few seconds. The goal behind this tool was to get results quickly while maintaining low amounts of false positives. Available In Featured The Privacy, Securit...

metasploitable3

Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

See-SURF

See-SURF Security scanner now powered with AI 🤖 to find potential Server Side Request Forgery SSRF parameters in your web application. See-SURF not only helps you detect potential SSRF parameters but also helps you validate it, protecting your application with system and user data compromise. 🎓...

bopscrk

bopscrk Generate smart and powerful wordlists for targeted attacks Explore the docs » View Demo · Report Bug · Request Feature Table of contents 1. About the Project What's new Built with 2. Getting started Installation Run interactive mode 3. Usage How it works Tips Advanced usage Lyricpass 4...

CVE-2019-19945_Test

CVE-2019-19945Test This is the code for the first Proposed CVE 1. Install Docker 2. Build & RUN Server cd Server docker build -t server/cve . docker run -d --name server -p 80:80 server/cve 3. Get Server Container IP Linux sudo docker container inspect server | grep -i IPAddress Windows Powershel...

log4j-detect

log4j-detect 简单的 Python 3 脚本，用于通过多线程检测一组 URL 是否存在 "Log4j" Java 库漏洞 CVE-2021-44228 该脚本 "log4j-detect.py" 使用 Python 3 开发，用于检测指定 URL 列表是否易受 CVE-2021-44228 影响。 为此，它会使用线程（性能更高）向列表中的每个 URL 发送 GET 请求。该 GET 请求包含一个 payload，若成功，则会向 Burp Collaborator / interactsh 返回一个 DNS 请求。该 payload 通过一个测试参数以及 "User-Agent...

log4j-detect

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

003Recon

📌 Description This repository contains some of my scripts that i created to automate some recon processes. It performs the following things; 1. Get subdomains of a domain 2. Filter out only online domains 3. Scan the domains for CRLF 4. Check for a CORS misconfigurations 5. Test for open redirect...

WhatBreach

WhatBreach WhatBreach is an OSINT tool that simplifies the task of discovering what breaches an email address has been discovered in. WhatBreach provides a simple and effective way to search either multiple, or a single email address and discover all known breaches that this email has been seen i...

CVE-2024-40453

CVE-2024-40453 - Squirrelly v9.0.0 RCE 免责声明： 本脚本仅供教育用途。 请勿将其用于非法目的。 如果用于非法目的，责任完全由使用者承担；本人不对任何滥用行为负责。 描述 该脚本会在当前目录下创建一个名为 payload.sh 的反向 Shell。 然后它在 80 端口上托管一个 HTTP 服务器，供受害者拉取 payload.sh。 攻击者机器上需要启动一个监听器。 HTTP 服务器会在 3 秒后关闭，以便受害者拉取并执行 payload.sh。 漏洞利用说明 基于以下信息，开发了此概念验证（POC）。...

CVE-2025-13315

🛡️ CVE-2025-13315 - Critical Authentication Bypass in Twonky Server 8.5.2 -e63939?style=for-the-badge An unauthenticated attacker can bypass API authentication, leak admin credentials from logs, and achieve full administrator access. 📋 Overview CVE-2025-13315 is a critical access control flaw in...

monitor

BetterDB Monitor Valkey 应得的监控层。 BetterDB 持久化保存 Valkey 丢弃的数据——慢日志、命令模式、客户端活动、异常信号——这样你就能排查凌晨 3 点发生了什么，而不仅仅是当下正在发生什么。专为 Valkey 8.x 构建，原生支持 COMMANDLOG、CLUSTER SLOT-STATS 以及每线程 I/O 指标。其余功能兼容 Redis 6+。 网站 | Docker Hub | npm | 文档 | 博客 BetterDB 由 BetterDB Inc. 构建，这是一家依据 OCV Open Charter 运营的公益公司。...

DedeCMS 5.7 - SQL Injection

DedeCMS through 5.7 has SQL Injection via the $FILES superglobal to plus/recommend.php. id: CVE-2017-17731 info: name: DedeCMS 5.7 - SQL Injection author: j4vaovo severity: critical description: | DedeCMS through 5.7 has SQL Injection via the $FILES superglobal to plus/recommend.php. impact: |...

Nacos <1.4.1 - Authentication Bypass

Nacos before version 1.4.1 is vulnerable to authentication bypass because the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint i...