uncover

Descubre rápidamente hosts expuestos en internet usando múltiples motores de búsqueda. Características • Instalación • Uso • Configuración • Ejecutar Uncover • Unirse a Discord uncover es un wrapper en Go que utiliza APIs de motores de búsqueda conocidos para descubrir rápidamente hosts expuestos...

dalfox

Dalfox es una potente herramienta de código abierto que se centra en la automatización, lo que la hace ideal para escanear rápidamente fallos de XSS y analizar parámetros. Su avanzado motor de pruebas y sus características especializadas están diseñados para agilizar el proceso de detección y...

TokenPlayer

TokenPlayer Manipulating and Abusing Windows Access Tokens. TokenPlayer is just a small tool i made to learn win32 api programming and understand better the access token model of windows. Features: Stealing and Impersonating primary tokens. Impersonating Protected Processes. Bypassing UAC by usin...

FOISted

| / \ |/ | | | | | | | | | || | | | | | | | || | | || | \ | / / | | | | || || | | || / | | || /|/ \|,| FOISted: a MikroTik remote jailbreak Description FOISted is an exploit for two post-authentication vulnerabilities in MikroTik's RouterOS. It can be used to remotely jailbreak RouterOS...

Django-faille-CVE-2025-57833_test

Testing SQL Injection Vulnerability via Aliases in Django Definition: What is an alias? An alias is a name given to a column or aggregation result in an SQL query. In Django, aliases are used with the annotate or alias methods to name computed fields. Example: from django.db.models import Count...

CVE-2023-0830

CVE-2023-0830: EasyNAS 1.1.0 Authenticated OS Command Injection Exploit This Python script is a powerful exploit for EasyNAS version 1.1.0 with enhanced functionality, including an integrated listener. The vulnerability exploited is a command injection flaw, which requires authentication. The...

richfaces-vulnerability-cve-2018-12533-rf-14310

Demonstrates the flaw present in RichFaces 3.3.4 of remote code execution and how to mitigate and/or block Attack example Clone the repository Decoding the payload Deserializing the Java class Generating a payload to test the vulnerability How to mitigate? If you really need this endpoint If you...

Roundcube_CVE-2025-49113

RCE in Roundcube CVE-2025-49113 - My Obsidian note .md date time Status: Completed Lab: Easy Tags: RCE | PHP | LABTHM | EXPLOIT | CVE by KRPT Paulo G. Werneck - Linkedin - in.com/pgw-script Impact : remote command execution post-login CVSS 9.9 Affected versions : ≤ 1.5.10 / 1.6.10 Patched : 1.5.1...

Malicious code in luoxy-baileys (npm)

This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...

MAL-2026-17446 Malicious code in luoxy-baileys (npm)

This package is a fork of the Baileys WhatsApp Web library npm and belongs to the "PhantomSub" family described by OX Security in September 2026: the publisher injected code that, without the installer asking, uses the installer's own authenticated WhatsApp session to subscribe that account to...

CVE-2025-70341

CVE-2025-70341: Insecure Permissions + Arbitrary Code Execution in App-Auto-Patch Summary App-Auto-Patch v3.4.2 creates its working directory with world-writable permissions chmod 777, enabling a local TOCTOU time-of-check-time-of-use race condition. An unprivileged local attacker can exploit thi...

CVE-2023-0179-POC-

CVE-2023-0179 POC Credits to https://github.com/TurtleARM Steps to Reproduce Install Ubuntu-22.04.5-live-server-iso and fully install the version, but don’t update the system Install the Linux kernel version 6.1.6 onto the Virtual Machine with the Ubuntu version 24.04.5 Install the following...

CVE-2024-0195

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-0195 Run bellow command to check CVE-2024-0195 -h Configurations 2. We integrated with the Telegram API to receive...

metabigor

Metabigor - potencia OSINT sin la molestia de las claves API ¿Qué es Metabigor? Metabigor mapea la infraestructura de un objetivo sin pedirte que te registres para obtener una sola clave API. Rangos de red, certificados, dominios relacionados, puertos expuestos, proveedores de CDN y fugas de...

CVE-2025-5815-Nuclei-Template

📄 Nuclei Template for CVE-2025-5815 🚀 Overview This repository features a Nuclei template specifically designed to detect an Unauthenticated Bot Logging Disable Vulnerability CVE-2025-5815 in the Traffic Monitor WordPress plugin. This issue allows unauthenticated attackers to remotely disable bot...

CVE-2025-49113-PoC

CVE-2025-49113 Roundcube RCE PoC 🚀 How to launch the project 1. Starting the vulnerable server cd Stand docker-compose up -d 2. Running the script against the target cd PoC/src python3 scanner.py --target http://localhost:9000 --username test --password test --command "id" 📌 Key Requirements...

CVE-2023-4568

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2023-4568 Run bellow command to check CVE-2023-4568 -h Configurations 2. We integrated with the Telegram API to receive...

log4j-scanner

log4j-scanner Log4j 2 CVE-2021-44228 vulnerability scanner for Windows OS. Example Usage Usage .\log4j-scanner.exe Terminal is used to output results, deploy this to machines via RMM and Start/Report from PowerShell or CMD Prompt. Build from source git clone...

CVE-2025-49132_HTB_SEASON10

CVE-2025-49132 - Pterodactyl Panel RCE Exploit HTB Season 10 - Pterodactyl Machine Writeup Overview Target: Pterodactyl HTB Machine Medium Difficulty CVE: CVE-2025-49132 Severity: Critical CVSS 9.8 Attack Type: Unauthenticated Remote Code Execution Affected: Pterodactyl Panel v1.11.11 This exploi...

gimphash

gimphash gimphash is a proposed method to calculate an imphash equivalent for Go binaries. It's name stands for G o-imp ort-hash. Golang binaries contain their dependencies as part of the executable. These dependencies include both standard library packages and third party dependencies and can be...