lssh

lssh ls + ssh = lssh lssh is a terminal-native remote access suite for SSH workflows, cloud inventories, and provider-backed connectors. It lets you select hosts from OpenSSH config, lssh config, or provider inventories, then operate them through native SSH or connector backends such as AWS SSM,...

s3enum

s3enum s3enum is a fast and stealthy Amazon S3 bucket enumeration tool. It leverages DNS instead of HTTP, which means that requests are not logged in S3 server access logs. It was originally built back in 2016 to target GitHub. Installation go install github.com/koenrh/s3enum@latest Usage You nee...

ldapserver

This package is a work in progress. ldapserver is a helper library for building server software capable of speaking the LDAP protocol. This could be an alternate implementation of LDAP, a custom LDAP proxy or even a completely different backend capable of "masquerading" its API as a LDAP Server...

AutoProber

AutoProber AutoProber is the hardware hacker's flying probe automation stack for giving your agent everything it needs to go from "there's a new target on the plate" to probing individual pins in a safe way. Demo video: https://gainsec.com/autoprober-demo-mp4/ Flow 1. Tell the agent to ingest the...

ransomwhere

Ransomwhere A Proof of Concept ransomware sample that encrypts your files to test out your ransomware detection & prevention strategies. If no arguments are provided, ransomwherewill automatically execute the encrypt mode without deleting the original files. I am not responsible for any damage...

CVE-2026-8732

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Example usage: Install dependencies Run the project Replace the commands...

CVE-2021-29447-PoC

CVE-2021-29447-PoC Overview CVE-2021-29447 is an XML External Entity XXE injection vulnerability affecting WordPress versions 5.6–5.7 patched in 5.7.1 when running PHP 8.0+. The vulnerability resides in the getID3 library used for media metadata parsing. WordPress processes WAV file iXML chunks v...

CVE-2020-16898-EXP-POC

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP Remote Code Execution Vulnerability EXP&POC Reproduction forforever: https://www.cnblogs.com/forforever/p/13846077.html PoC CVE-2020-16898Checker-poc Command: Run PowerShell/CMD as Administrator Powershell.exe -ExecutionPolicy UnRestricted -File...

HashDump-BypassEDR

1 Project Overview By leveraging the extended capabilities of the system whitelisted program Reg.exe, we cleverly bypass the interception points of antivirus software, achieving the goal of bypassing EDR to dump hashes. According to actual testing, this method is effective against Windows-series...

OSRipper

OSRipper v0.4.2 Advanced cross-platform payload generator and crypter with FUD capabilities Features • Quick Start • Web UI • Payload Types • Documentation Overview OSRipper is a sophisticated, fully undetectable FUD backdoor generator and crypter designed for authorized penetration testing and r...

s3tk

s3tk A security toolkit for Amazon S3 🍊 Battle-tested at Instacart Installation Run: pip install s3tk You can use the AWS CLI or AWS Vault to set up your AWS credentials: pip install awscli aws configure See IAM policies needed for each command. Commands Scan Scan your buckets for: ACL open to...

cve-2023-46813-poc

CVE-2023-46813 PoC 1. Apply the patches in the host-patches folder to the Linux host and QEMU. 2. Start an SEV-SNP VM. 3. Run the code in this repo and wait for the message "waiting for the hypervisor to change memory to MMIO". 4. Spam the attack command in QEMU several times. 5. Once the exploit...

kimi

Kimi: Attack Surface Discovery Engine Developed with 💜 by @alechilczenko Project Context: This project serves as a portfolio piece demonstrating concepts in offensive security, concurrency, and distributed architecture. 1. Introducing Kimi: The Origin Story What was Kimi ? During my early days...

gallia

Gallia Gallia is an extendable pentesting framework with the focus on the automotive domain. The scope of the toolchain is conducting penetration tests from a single ECU up to whole cars. Currently, the main focus lies on the UDS interface. Acting as a generic interface, the logging functionality...

pacpoc

PACPoC: A local PoC exploit for CVE-2019-2205 To try out this exploit install the "malicious" app PacTest.apk and make exploit.pac available over http with, for example python -m SimpleHTTPServer. Then go to proxy settings on an Android device, select proxy autoconfig, and enter the URL to...

macsurf

This project is developed with the assistance of an LLM The modern web, on a 25-year-old Mac. A native browser for the Carbon era, Mac OS 8.6 through Mac OS X 10.6: real CSS, modern JavaScript, and HTTPS on the Mac itself. No proxy, no second machine. MacSurf 2.0.5 on a Power Mac G3 iMac,...

cve-2017-12945

CVE-2017-12945 Exploit for CVE-2017-12945 A remote authenticated blind OS command injection vulnerability exists in Mersive Solstice Pods - a wireless collaboration and presentation platform designed by Mersive Technologies Inc. - running versions of the firmware prior to 2.8.4, as...

python-codext

CodExt Encode/decode anything. CodExt is a Python2-3 compatible library that extends the native codecs library namely for adding new custom encodings and character mappings and provides 120+ new codecs , hence its name combining CODecs EXTension. It also features a guess mode for decoding multipl...

CVE-2024-50379-POC

CVE-2024-50379-POC This repository contains a Python script designed to exploit CVE-2024-50379 , a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either...

YZMCMSxss

YZMCMSxss CVE-2018-8078 YZMCMS v3.7 latest version xss vulnerability YZMCMS V3.7 Stored XSS This xss exists in the newly added advertising management module in v3.7, as shown in the figure: This xss exists in v3.7 new advertising management module, as shown in the figure: We can find the specific...