boa-detector

boa-detector This Zeek package detects the Boa web server string in HTTP headers. All Boa versions are considered vulnerable: https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ When the /^Boa/./ server string i...

CVE-2021-38647-noimages

CVE-2021-38647 AKA "OMIGOD" A Zeek package which detects CVE-2021-38647 AKA OMIGOD exploit attempts. https://corelight.com/blog/detecting-cve-2021-38647-omigod https://www.wiz.io/blog/omigod-critical-vulnerabilities-in-omi-azure https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-38647...

wifiphisher

Acerca de Wifiphisher es un framework de Punto de Acción falso para realizar compromisos de equipos rojos o pruebas de seguridad Wi-Fi. Usando Wifiphisher, los probadores de penetración pueden lograr fácilmente una posición de hombre en el medio MitM contra clientes inalámbricos mediante la...

apache__activemq_CVE-2020-11998_5-15-12

Welcome to Apache ActiveMQ Apache ActiveMQ is a high performance Apache 2.0 licensed Message Broker and JMS 1.1 implementation. Getting Started To help you get started, try the following links: Getting Started http://activemq.apache.org/version-5-getting-started.html Building...

POC-CVE-2022-26671

If you got here, you know why this repo needed created. CVE-2022-26671 GET /AT/ATDefault.aspx Line's 430 contains the cleartext credential. secom | supervisor In regards to to responsible disclosure, not dislcosing a hardcoded cleartext HTTP body response is silly when its the login page./...

CVE-2025-2294

CVE-2025-2294 - WordPress Kubio AI Page Builder = 2.5.1 - Local File Inclusion LFI Exploit Overview CVE-2025-2294 affects the Kubio AI Page Builder plugin for WordPress versions up to and including 2.5.1. It suffers from an unauthenticated Local File Inclusion LFI vulnerability via the...

CVE-2024-12025

CVE-2024-12025 Collapsing Categories = 3.0.8 - Unauthenticated SQL Injection Description The Collapsing Categories plugin for WordPress is vulnerable to SQL Injection via the 'taxonomy' parameter of the /wp-json/collapsing-categories/v1/get REST API in all versions up to, and including, 3.0.8 due...

apache__jspwiki_CVE-2019-0225_2-11-0-M2

Apache JSPWiki 2.11 - Documentation Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the Apache License,...

pyghidra-mcp

PyGhidra-MCP - Servidor del Protocolo de Contexto de Modelo para Ghidra Descripción general pyghidra-mcp es un servidor de línea de comandos del Protocolo de Contexto de Modelo MCP que lleva todo el poder analítico de Ghidra, una robusta suite de ingeniería inversa de software SRE, al mundo de lo...

xuxueli__xxl-job_CVE-2020-29204_2-2-0

XXL-JOB XXL-JOB, a distributed task scheduling framework. -- Home Page -- Introduction XXL-JOB is a distributed task scheduling framework. It's core design goal is to deve...

CVE-2025-29927-PoC

CVE-2025-29927 - Next.js Middleware Authorization Bypass PoC This repository contains a Proof of Concept PoC exploit for CVE-2025-29927 , a critical vulnerability in Next.js that allows attackers to bypass authorization checks by abusing a middleware-specific HTTP header. Overview CVE ID:...

slipstream

NAT Slipstreaming NAT Slipstreaming permite a un atacante acceder remotamente a cualquier servicio TCP/UDP vinculado a cualquier sistema detrás del NAT de la víctima, evitando el NAT/cortafuegos de la víctima control remoto arbitrario de agujeros en el cortafuegos, simplemente con que la víctima...

thief_raccoon

Thief Raccoon - Herramienta de Phishing para Inicio de Sesión Thief Raccoon es una herramienta diseñada con fines educativos para demostrar cómo se pueden realizar ataques de phishing en varios sistemas operativos. Esta herramienta tiene como objetivo crear conciencia sobre las amenazas de...

CVE-2022-43097

CVE-2022-43097 All details about CVE-2022-43097 Software: Phpgurukul User Registration & User Management System v3.0 Software Link: https://phpgurukul.com/user-registration-login-and-user-management-system-with-admin-panel/ Description: Phpgurukul User Registration & User Management System v3.0 w...

wcfproxy

Build You can either compile the tool once and then use the resulting binary or you can run it "like a script" the Go toolchain will compile it on the fly. For development, the latter option is convenient. For productive use, it is recommended to compile it once from the cli directory and use the...

frida

frida Este repositorio contiene varios scripts de Frida para pruebas de penetración en aplicaciones Android. Creé este proyecto para demostrar las capacidades del framework de análisis dinámico Frida. Puedes leer mi artículo "Introduction to Frida" en Medium, donde explico cómo usar Frida con...

CVE-2025-24813-PoC

CVE-2025-24813-PoC CVE-2025-24813 affects Apache Tomcat - if it's a vulnerable version and spectacularly misconfigured, an attacker can get RCE with one GET and one POST. More info here This is Yiheng An, Jun Li, Qiang Liu, Haozhe Zhang, Qi Deng's script from the recent writeup modified to accept...

webscreenshot

webscreenshot Descripción Un script sencillo para capturar pantallas de una lista de sitios web, basado en el script url-to-image de PhantomJS. Características Integración del 'renderizado diferido' de url-to-image para recursos AJAX Funciona completamente en sistemas Windows y Linux Soporte de...

slowloris

slowloris.py - Slowloris simple en Python ¿Qué es Slowloris? Slowloris es básicamente un ataque de Denegación de Servicio HTTP que afecta a servidores con hilos. Funciona así: 1. Comenzamos a hacer muchas solicitudes HTTP. 2. Enviamos encabezados periódicamente cada 15 segundos para mantener las...

CVE-2022-24637

CVE-2022-24637 Open Web Analytics OWA - Unauthenticated Remote Code Execution https://vulners.com/cve/CVE-2022-24637 Example python3 exploit.py -u admin -p hacker http://target.org 10.10.11.12 4444...