sqliv

SQLiv Massive SQL injection scanner Features 1. multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo 2. targetted scanning by providing specific domain with crawling 3. reverse domain scanning both SQLi scanning and domain info checking are done in multiprocessing so the...

Cloak

Cloak Cloak is an intelligent python backdoor framework. What it exactly does? Cloak generates a python payload via msfvenom and then intelligently injects it into the python script you specify. To evade basic detection, Cloak breaks the payload into several parts and places it in different place...

leviathan

Leviathan is a mass audit toolkit which has wide range service discovery, brute force, SQL injection detection and running custom exploit capabilities. It consists open source tools such masscan, ncrack, dsss and gives you the flexibility of using them with a combination. The main goal of this...

explo

explo explo is a simple tool to describe web security issues in a human and machine readable format. By defining a request/condition workflow, explo is able to exploit security issues without the need of writing a script. This allows to share complex vulnerabilities in a simple readable and...

Maximo_Sql_Injection-CVE-2019-4650

This repository does not have a README...

cve-2022-33891-fix

EP3 - MAC0352 Redes deComputadores e Sistemas Distribuidos 2023 Tópico: CVE-2022-33891 Execução de comandos shell arbitrários em aplicação spark que utiliza autenticação via ACL Alunos Elinilson Vital Leoarndo Bozzetto CVE-2022-33891 Patch Instructions for Ubuntu 22.04 Prerequisites Ubuntu 22.04...

CVE-2026-63030

wp2shell — WordPress Core Pre-Auth RCE CVE-2026-63030 Batch Route Confusion + CVE-2026-60137 SQL Injection Zero-dependency exploitation toolkit for the wp2shell vulnerability chain in WordPress Core. A single anonymous HTTP request achieves remote code execution on a default WordPress installatio...

CVE-2026-21011-Log4j-style-JNDI-Injection-in-Custom-Logger-Simulated-

CVE-2026-21011 – Log4j‑style JNDI Injection in Custom Logger Simulated Program Code Java simulation in Python log4jsim.py - Custom logger that evaluates $... patterns import subprocess, re def logmessage: Vulnerable: looks up JNDI-like syntax and executes pattern = r'$\jndi:.+?' for match in...

CVE-2025-60787-MotionEye-RCE

CVE-2025-60787: Motioneye Remote Code Execution RCE Professional Proof-of-Concept PoC for CVE-2025-60787, a critical Remote Code Execution RCE vulnerability in MotionEye versions ≤ 0.43.1b4. Technical Overview The vulnerability arises from a client-side validation bypass in the configUiValid...

homelab-CVE-2021-44228

Homelab: Log4Shell CVE-2021-44228 on Apache Solr Controlled Docker environment to reproduce and study the Log4Shell vulnerability in Apache Solr. The Environment Target solr-lab: Apache Solr v8.11.0 vulhub/solr:8.11.0 running a vulnerable version of Log4j. Attacker kali-lab: Basic Kali Linux...

CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC

CVE-2023-27372 — SPIP Unauthenticated remote code execution vulnerability in SPIP before 4.2.1. The oubli parameter in the password reset form is vulnerable to PHP object injection due to mishandled deserialization. A crafted serialized payload is executed server-side as the web user, and the...

AutoSQLi

AutoSQLi, the new way script-kiddies hack websites Features Save System - there is a complete save system, which can resume even when your pc crashed. - technology is cool Dorking - from the command line one dork : YES - from a file: NO - from an interactive wizard: YES Waffing - Thanks to...

maalik

Maalik Network Pivoting and Post Exploitation Framework. Features Console Features Desktop notification on new session. Kill Online session easily. Build Maalik Client, Fhdawn easily. Configurable values in settings.ini Root shell. Multithreaded, Get multiple sessions. Maalik is extremenly easy t...

flare-qdb

FireEye Labs Query-Oriented Debugger flare-qdb es una herramienta basada en Python, utilizable desde la línea de comandos y mediante scripts, diseñada para evaluar y manipular el estado nativo de un programa. Utiliza Vivisect para establecer un punto de interrupción en cada instrucción consultada...

CVE-2023-30258-Magnus-Billing-v7-Command-Injection-PoC

CVE-2023-30258 — Magnus Billing v7 Command Injection PoC Unauthenticated command injection vulnerability in Magnus Billing v7.3.0. The democ GET parameter in icepay.php is passed directly to a shell function without sanitization, allowing arbitrary command execution as the web server user. The...

AVIator

AviAtor Ported to NETCore 5 with an updated UI AV|Ator About ://name AV : AntiVirus Ator : Is a swordsman, alchemist, scientist, magician, scholar, and engineer, with the ability to sometimes produce objects out of thin air https://en.wikipedia.org/wiki/Ator About ://purpose AV|Ator is a backdoor...

PHP_8.1.x_Exploit

🚀 PHP CVE Autopilot Automated detection & exploitation of critical PHP vulnerabilities CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178 PHP8.1.xExploit.sh is a single‑file, zero‑configuration security assessment tool that automatically discovers vulnerable PHP endpoints and...

poc-graphql

Table Of Content Table Of Content Research on GraphQL Objective Labs Deploying on Docker Security weaknesses Authorization Issue Reco Injection Issue Reco Resource exhaustion Issue Reco Exposure of private data Issue Reco Exposure of technical information in case of unexpected error Issue Reco...

LearnDash

LearnDash Sqli LearnDash = 4.25.6 - Admin+ SQL Injection Description LearnDash Wordpress plugin version below 4.25.6 is vulnerable to Admin+ SQL Injection. Details Type : plugin Slug : sfwd-lms Affected Version : CVSS Score : 9.8 CVSS Rating : Critical CVSS Vector :...

Web-Penetration-Test

Web-Penetration-Test Exploiting WordPress vulnerabilities CVE-2025-34077, authentication bypass via cookie injection, and privilege escalation to root. Part of my Cybersecurity Specialization. Day 1: Hacking my First Website Lab Report: Exploiting the "BigWear" Server In this first session of my...