CVE-2024-36401

CVE-2024-36401 Usage python3 exploit.py Enter host e.g., https://example.com/: https://target.com/ Enter IP: Your IP Public/Host Ngrok Enter Listing Port: Your Port Listen...

git-dumper

git-dumper A tool to dump a git repository from a website. Install This can be installed easily with pip: pip install git-dumper Usage usage: git-dumper options URL DIR Dump a git repository from a website. positional arguments: URL url DIR output directory optional arguments: -h, --help show thi...

GitHacker

GitHacker A multi-threaded .git folder exploitation tool. Reconstructs the target repository in full — source code, commit history, branches, stashes, remotes, tags — even when DirectoryListings is disabled, by brute-forcing well-known refs. The accompanying research site at...

CVE-2025-67160

CVE-2025-67160 — Vatilon-based IP Cameras Summary Vatilon-based IP camera firmware exposes multiple internal web directories without requiring authentication. When directory indexing is enabled on the embedded web server, unauthenticated attackers can access directories such as /cgi-bin/, /view/,...

Swego

Swego Swiss army knife Webserver in Golang. Keep simple like the python SimpleHTTPServer but with many features Usage Run the binary If you don't want to build it, binaries are availables on https://github.com/nodauf/Swego/releases Otherwise, build-essential should be installed and GOPATH...

POC_CVE-2026-41940

POCCVE-2026-41940 Quick start python3 pocCVE-2026-41940.py -h Usage examples Scan one host python3 pocCVE-2026-41940.py -u https://target.example:2086 List accounts after successful chain python3 pocCVE-2026-41940.py -u https://target.example:2086 --action list Run a shell command python3...

firehol

FireHOL http://firehol.org/ FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade Notes. Cloning...

WordPressMassExploiter

WordPressMassExploiter Mass exploiter of CVE-2015-1579 for WordPress CMS This mass exploiter is based on CVE-2015-1579, discovered by CLAUDIO VIVIANI https://www.exploit-db.com/exploits/36554/ How it works: 1 - I use Selenium Framework to make the search on google. 2 - The results of search, are...

CVE-2023-37599

CVE-2023-37599 — issabel-pbx 4.0.0-6: Directory Listing Broken Access Control Overview issabel-pbx version 4.0.0-6 contains a Broken Access Control vulnerability that manifests as unauthenticated Directory Listing on the web interface. Any remote, unauthenticated attacker can browse the...

smbclient-ng

smbclient-ng, a fast and user friendly way to interact with SMB shares. !NOTE Check out the new smbclient-ng written in Go, faster and cross platform by default! https://github.com/TheManticoreProject/smbclient-ng Features acls: List ACLs of files and folders in cwd. Syntax: acls bat: Pretty prin...

CVE-2026-7071-access-Control

Unauthenticated Resume Exposure in CodeAstro Online Job Portal PHP MySQL Details Vendor: CodeAstro Product: Online Job Portal Project in PHP MySQL Version: 1.0 Vulnerability Type: Improper Access Control / Information Disclosure CWE: CWE-284, CWE-200, CWE-548 Affected Endpoint: /users/user-cvs/...

POC_CVE-2024-4322

CVE-2024-4322: LoLLMS WebUI PoC & Nuclei Validation Lab This repository provides Dockerized local labs for reproducing CVE-2024-4322 , a path traversal vulnerability in LoLLMS WebUI v9.6, and for validating that the associated Nuclei template does not match LoLLMS WebUI v9.8. Use this lab only...

wayBackLister

WaybackLister v1.1 — by FR13ND0x7F Discover potential directory listings through archived URLs from the Wayback Machine. 🕵️‍♂️ What It Does WaybackLister is a reconnaissance tool that taps into the Wayback Machine to fetch historical URLs for a domain, parses unique paths, and checks if any of...

PSI_BOF

ProcessInspect BOF A CS BOF which can be used to inspect process memory, addresses and symbols! Overview of commands Command| Description ---|--- lm| list all loaded modules along with base address, entry point, and more addr| Print the bytes at a given memory address meminfo| Print information f...

CVE-2023-49981

CVE-2023-49981 School Fees Management System v1.0 - Incorrect Access Control - Directory Listing Description : A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensitive files within the application without requiring...

vuln-list-debian

vuln-list-debian Debian Security Tracker...

google-dorks

Google Dorks for web security A collection of search queries for finding publicly indexed pages, files, and technology footprints during authorized security work. A search result is a lead to investigate, not proof of a vulnerability. Google results can be incomplete, personalized, or change over...

vuln-list-nvd

vuln-list-nvd NVD...

miteru

This repository does not have a README...

bmc_bladelogic

BMC Bladelogic RSCD remote exploits for Linux and Windows Change passwords, List users and Remote code execution Exploiting vulnerabilities in BMC BladeLogic RSCD agent CVE-2016-1542 BMC-2015-0010 CVE-2016-1543 BMC-2015-0011 CVE-2016-5063 Published on exploit-db BMCrexec.py...