604855 matches found
excelpeek
ExcelPeek v0.2 ExcelPeek es una herramienta diseΓ±ada para ayudar a investigar archivos de Microsoft Excel potencialmente maliciosos. DocumentaciΓ³n Usa la GuΓa de instalaciΓ³n para comenzar. Ve a la GuΓa del usuario para obtener informaciΓ³n adicional...
SideCopy-Exploits-CVE-2023-38831
SideCopy explota CVE-2023-38831 CVE-2023-38831 es una vulnerabilidad de ejecuciΓ³n remota de cΓ³digo RCE en WinRAR que afecta a versiones anteriores a la 6.23. AsΓ es como un atacante puede explotarla: el archivo malicioso contiene tanto un archivo benigno como una carpeta con el mismo nombre que e...
CVE-2026-73334
A flaw was found in Apache Parquet Hadoop. When processing a Parquet file, if the Key Management Service KMS Uniform Resource Locator URL is controlled by the file and not explicitly set by the application, a vulnerability can arise. An attacker could craft a malicious Parquet file to direct a KM...
np-audit
np-audit β npm package auditor Static security analysis for npm packages β detects obfuscated lifecycle scripts, known vulnerabilities, and malicious patterns before they run. Drop-in replacement for npm install and...
cve-2017-8760
Exploit toolkit CVE-2017-8759 - v1.0 Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other...
CVE-2021-40444
CVE-2021-40444 Prueba de concepto Generador de docx malicioso para explotar CVE-2021-40444 EjecuciΓ³n remota de cΓ³digo en Microsoft Office Word La creaciΓ³n de este script se basa en ingenierΓa inversa sobre la muestra utilizada in-the-wild:...
depx
depx Malicious package & supply-chain intelligence Features β’ Installation β’ Usage β’ Running depx β’ JSON β’ Join Discord depx is a fast, passive supply-chain intelligence CLI. It tells you whether a package is known malicious hijacked publishes, credential stealers, install-script backdoors by...
CVE-2021-38295-PoC
CVE-2021-38295-PoC A simple Python proof of concept for CVE-2021-38295. Related Blog Post LINK TO BLOG Usage: root@kitploit: Usage: cve-xxxx Simply supply the script with a host, a database which your creds have access too, and the username password pair. If everything works, you'll get a URL whi...
geo-recon
Geo-Recon An OSINT CLI tool desgined to fast track IP Reputation and Geo-locaton look up for Security Analysts. Pre-requirements for Linux Python3 bash sudo apt install python3 Pip3 bash sudo apt install python3-pip If you don't use Debian or Ubuntu, search for their respective platforms like yum...
flightsim
Network Flight Simulator flightsim is a lightweight utility used to generate malicious network traffic and help security teams to evaluate security controls and network visibility. The tool performs tests to simulate DNS tunneling, DGA traffic, requests to known active C2 destinations, and other...
PrintNightmare-CVE-2021-1675-CVE-2021-34527
CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Patch update Microsoft has released a patch to...
CVE-2020-0668
CVE-2020-0668 PowerShell implementation, uses printconfig.dll to elevate privileges evil dll can be customized, the dll here will execute the c:\programdata\setup.bat file Reference: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668...
sandfly-entropyscan
What is sandfly-entropyscan? sandfly-entropyscan is a utility to quickly scan files or running processes and report on their entropy measure of randomness and if they are a Linux/Unix ELF type executable. Some malware for Linux is packed or encrypted and shows very high entropy. This tool can...
CVE-2025-31324
SAP CVE-2025-31324 Analyzer A Python-based security scanner for identifying the CVE-2025-31324 vulnerability in SAP Visual Composer systems, and detecting known Indicators of Compromise IOCs such as malicious .jsp. π Features Detects vulnerable Visual Composer endpoints Scans for known malicious...
CVE-2026-29053
This is a rework of the Repo by rootxran for this same CVE - https://github.com/rootxran/CVE-2026-29053 During testing against specific Ghost CMS environments, the original theme payload triggered a Fatal Handlebars Error. The CMS failed to activate the malicious theme because it referenced a...
crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages
A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...
OpenSTAManager_RCE_Exploit-CVE-2026-38751-
OpenSTAManager RCE Exploit CVE-2026-38751 Overview This Python script exploits a Remote Code Execution vulnerability in OpenSTAManager version 2.10, identified as CVE-2026-38751. The exploit allows authenticated users to upload a malicious module and execute arbitrary commands on the target syste...
bluemonday
bluemonday bluemonday is a HTML sanitizer implemented in Go. It is fast and highly configurable. bluemonday takes untrusted user generated content as an input, and will return HTML that has been sanitised against an allowlist of approved HTML elements and attributes so that you can safely include...
CVE-2021-30860
CVE-2021-30860 CVE-2021-30860 FORCEDENTRY is a known vulnerability in MacOS, iOS, and WatchOS. It allows arbitrary code execution by sending a victim device a "maliciously crafted PDF". This vulnerability was patched by Apple on September 13, 2021 with the following versions: iOS 14.8 OSX Big Sur...
CVE-2022-22947
Spring Cloud Gateway Actuator API SpEL Expression Injection Command Execution Exploit Usage: python3 CVE-2022-22947.py -u "http://127.0.0.1:8080" -c "whoami" Result: Malicious SpEL expression route added successfully! Route refresh successful! Attack result obtained successfully:...