Nosql-Exploitation-Framework

Nosql-Exploitation-Framework Ein Framework für NoSQL-Scanning und -Exploitation NoSQL Exploitation Framework 2.02b veröffentlicht Autor NoSQL Exploitation Framework erstellt von Francis Alexander Wiki NoSQL Exploitation Framework Wiki zur Installation und Verwendung -...

mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install mongoaudit...

CVE-2026-59827

CVE-2026-59827: Desserialização insegura do Metabase em consultas nativas H2 Gravidade: Crítica CVSS 9.9 CVE: CVE-2026-59827 Aviso: GHSA-w95f-x9v9-wv36 Relator: Matheus Gutierre @Gutierre0x80 Publicado: 30 de junho de 2026 Resumo da vulnerabilidade Um usuário autenticado com acesso a consultas SQ...

debian-ssh

Debian OpenSSL Predictable PRNG Links Original URL: http://metasploit.com/users/hdm/tools/debian-openssl/1 Mirror2 Exploit: https://www.exploit-db.com/exploits/5622/ Perl3 https://www.exploit-db.com/exploits/5720/ Python4 https://www.exploit-db.com/exploits/5632/ Ruby12 Recommend Tool: Crowbar13...

Pompem

Pompem - Exploit- und Schwachstellen-Finder Pompem ist ein Open-Source-Tool, das entwickelt wurde, um die Suche nach Exploits und Schwachstellen in den wichtigsten Datenbanken zu automatisieren. Es wurde in Python entwickelt und verfügt über ein erweitertes Suchsystem, das die Arbeit von Penteste...

httptoolkit

HTTP Toolkit !HTTP Toolkit has received funding from NLnet as part of NGI Zero...

NXcrypt

NXcrypt NXcrypt ist ein polymorpher 'Python-Backdoor'-Verschlüssler, geschrieben in Python von Hadi Mene h4d3s. Die Ausgabe ist vollständig unerkennbar. NXcrypt kann eine schädliche Python-Datei mit einem Multi-Threading-System in eine normale Datei injizieren. Führen Sie es mit...

linux-smart-enumeration

First, a couple of useful oneliners ; wget "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -O lse.sh;chmod 700 lse.sh curl "https://github.com/diego-treitos/linux-smart-enumeration/releases/latest/download/lse.sh" -Lo lse.sh;chmod 700 lse.sh Note that...

ligolo

Ligolo : Reverse Tunneling made easy for pentesters, by pentesters Table of Contents Introduction Use case Quick Demo Performance Usage Setup / Compiling How to use? TL;DR Options Features To Do Licensing Credits Introduction Ligolo is a simple and lightweight tool for establishing SOCKS5 or TCP...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

zairo

Measuring zairo zairo's unit tests check that it builds the right prompts and handles answers correctly. They can't tell you whether a model, given those prompts, finds a vulnerability a change introduced, or flags one that isn't there. That's what this directory is for: a set of labelled changes...

dirsearch

dirsearch - Web Path Discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v. Join the Discord server to communicate with the team. Quick Start dirsearch requires Python 3.11 or higher. git clone https://github.com/maurosoria/dirsearch.git...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: pip install frida-tools CLI tools pip install frida...

CVE-2025-29927-Nextjs-Bypass-PoC

PoC: CVE-2025-29927 - Bypass de Middleware no Next.js Este repositório contém uma Prova de Conceito PoC demonstrando como contornar verificações de segurança de middleware no Next.js v13.5.6 ao explorar uma vulnerabilidade relacionada a cabeçalhos HTTP internos. Visão Geral da Vulnerabilidade:...

arp-scan

arp-scan About arp-scan is a network scanning tool that uses the ARP protocol to discover and fingerprint IPv4 hosts on the local network. It is available for Linux, BSD, macOS and Solaris under the GPLv3 licence. This is README.md for arp-scan version 1.10.1-git. Installation Building and...

arp-scan

arp-scan परिचय arp-scan एक नेटवर्क स्कैनिंग टूल है जो स्थानीय नेटवर्क पर IPv4 होस्ट्स को खोजने और फिंगरप्रिंट करने के लिए ARP प्रोटोकॉल का उपयोग करता है। यह GPLv3 लाइसेंस के अंतर्गत Linux, BSD, macOS और Solaris के लिए उपलब्ध है। यह arp-scan संस्करण 1.10.1-git के लिए README.md है। स्थापना स्रोत से...

MaliciousMacroGenerator

Schädliches Makro Generator Dienstprogramm Einfaches Werkzeug zum Erstellen von obfuskierten Makros, das auch einen AV-/Sandbox-Escape-Mechanismus enthält. Voraussetzung Python 2.7 Verwendung MMG.Malicious Macro Generator v2.0 - RingZer0 Team Author: Mr.Un1k0d3r [email protected] Usage: MMG....

hashID

hashID | hash-identifier Identifique os diferentes tipos de hashes usados para criptografar dados e especialmente senhas. Isto substitui hash-identifier , que está desatualizado! hashID é uma ferramenta escrita em Python 3 que suporta a identificação de mais de 220 tipos exclusivos de hash usando...

ROPgadget

ROPgadget Tool Dieses Tool ermöglicht es Ihnen, Ihre Gadgets in Binärdateien zu suchen, um Ihre ROP-Ausnutzung zu erleichtern. ROPgadget unterstützt ELF/PE/Mach-O/Raw-Formate auf x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64 und RISC-V Compressed-Architekturen. Installation Der einfachste...

msfpc

MSFvenom Payload Creator MSFPC A quick way to generate various "basic" Meterpreter payloads via msfvenom part of the Metasploit framework. About MSFvenom Payload Creator MSFPC is a wrapper to generate multiple types of payloads, based on users choice. The idea is to be as simple as possible only...