2323524 matches found
ShiroScan
ShiroScan Shiro=1.2.4 deserialization, one-click detection tool root@kitploit: ๆนๅจๅ ๅฎน๏ผ1.ๆฐๅข4ไธชๅฉ็จ้พๆจกๅCommonsCollections7-10๏ผ้ข่ฎกๅขๅ ๆๅ็30%๏ผๅทฒๆๅ ๆๆฐysoserial็jarๅ ๏ผ่ฏทๅฟๆดๆข ๆนๅจๅ ๅฎน๏ผ2.ๅขๅ ๅค็บฟ็จ๏ผ่ฝๆจกๅๅขๅ ไฝ้ๅบฆๅดๆ้ซ300% root@kitploit: ้ๆ21ไธชkey่ฟ่กfuzz If it helps, please give a star. Corresponding blog article:...
CVE-2015-1474_poc
This code is ment to be a tentative of a poc for CVE-2015-1474. The code is based on the code of the screencap comand, but generates a rogue parcel that crashes the surfaceflinger when it is deserialized. See more at...
idacode
IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...
idacode
IDACode IDACode facilita la ejecuciรณn y depuraciรณn de scripts de Python en su entorno IDA sin salir de Visual Studio Code. La extensiรณn de VS Code se puede encontrar en el marketplace. IDACode aรบn se encuentra en una etapa muy temprana y se espera que haya errores. Por favor, abra un nuevo issue ...
CVE-2022-22965
spring4shell โญ a python implementation of CVE-2022-22965 that provides a prompt to the user in the style of an ssh session. the script is designed to be easy to understand and execute, with both readability and accessbility - depending on the user's choice. Designed for exploiting the vulnerabili...
PSRansom
PSRansom PSRansom is a PowerShell Ransomware Simulator with C2 Server capabilities. This tool helps you simulate encryption process of a generic ransomware in any system on any system with PowerShell installed on it. Thanks to the integrated C2 server, you can exfiltrate files and receive client...
XSHOCK
โก xShock ShellShock โก Written by TMRSWRR Version 1.0.0 xShock ShellShock CVE-2014-6271 This tool exploits shellshock. Instagram: TMRSWRR ๐ผ๏ธ Screenshots ๐ผ๏ธ ๐น How to use ๐น Click on the image... ๐ Read Me ๐ All founded directories will be saved in vulnurl.txt file. The results of the executed commands...
SpringShell
Spring Core RCE - CVE-2022-22965 After Spring Cloud, on March 29, another heavyweight vulnerability of Spring broke out on the Internet: Spring Core RCE On March 31 Spring released new versions which fixes the vulnerability. See section Patching. On March 31 a CVE-number was finally assigned to t...
armory
root@kitploit: dM. ,MMb d'YM. ,P Mb MM 6MM MM 6MMb 6MMb 6MMMMMb MM 6MM MM M' d' YM. MM69 " MM69 MM69 Mb 6M' Mb MM69 " Mb d' ,PMbMMMMMMMMMMMMMMYM.,P d' YM. MM MM MM MM MM MM MM MM M \ ,MMMMMMMMbMMMMMMMMMMMMMMMbd'\ d' YM. MM MM MM MM YM. ,M9 MM YMP dM dMMMM MM MM MM YMMMMM9 MM M d' 8,P YMM...
armory
root@kitploit: dM. ,MMb d'YM. ,P Mb MM 6MM MM 6MMb 6MMb 6MMMMMb MM 6MM MM M' d' YM. MM69 " MM69 MM69 Mb 6M' Mb MM69 " Mb d' ,PMbMMMMMMMMMMMMMMYM.,P d' YM. MM MM MM MM MM MM MM MM M \ ,MMMMMMMMbMMMMMMMMMMMMMMMbd'\ d' YM. MM MM MM MM YM. ,M9 MM YMP dM dMMMM MM MM MM YMMMMM9 MM M d' 8,P YMM ๆ่ฟฐ...
droidlysis
DroidLysis DroidLysis es una herramienta de preanรกlisis para aplicaciones Android : realiza tareas repetitivas y aburridas que normalmente harรญamos al comienzo de cualquier ingenierรญa inversa. Desensambla la muestra de Android, organiza la salida en directorios y busca puntos sospechosos en el...
droidlysis
DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...
proxy.py
!Python 3.xhttps://img.shields.io/static/v1?label=Python&message=3.6%20%7C%203.7%20%7C%203.8%20%7C%203.9%20%...
win-exp-
DESCRIPTION This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. It requires the...
CVE-2024-9014
CVE-2024-9014 - pgAdmin 4 OAuth2 Authentication Bypass Exploit Tools This repository contains tools to check for and exploit the CVE-2024-9014 vulnerability in pgAdmin 4. The vulnerability allows an attacker to bypass OAuth2 authentication and access sensitive resources. Tools 1...
CVE-2023-25581
This Python script demonstrates the exploitation of the CVE-2023-25581 vulnerability in pac4j-core. The vulnerability allows an attacker to execute arbitrary code RCE by deserializing maliciously crafted Base64-encoded data. Prerequisites Before running the script, make sure you have the followin...
boa-detector
boa-detector This Zeek package detects the Boa web server string in HTTP headers. All Boa versions are considered vulnerable: https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ When the /^Boa/./ server string i...
vBulletin-CVE-2025-48828-Multi-target
๐ฅ vBulletin Remote Code Execution Scanner replaceAdTemplate This Python tool automates the detection of unauthenticated RCE vulnerabilities in vBulletin via the replaceAdTemplate exploit vector. Based on the original proof-of-concept by EgiX , this version supports batch scanning , multithreading...
CVE-2021-41773
Apache Path Traversal & RCE Exploit CVE-2021-41773 & CVE-2021-42013 These are critical path traversal vulnerabilities affecting Apache HTTP Server 2.4.49 and 2.4.50. They allow attackers to: Access files outside the web root LFI Achieve Remote Code Execution RCE if CGI is enabled Both...
CVE-2022-24112
Apache APISIX 2.12.x Remote Code Execution RCE Exploit This Python script is a Proof-of-Concept PoC for a remote code execution RCE vulnerability in Apache APISIX versions 2.12.0 and 2.12.1. The vulnerability lies in the misuse of the filterfunc Lua field within the admin API, allowing an attacke...