artemis2hashcat

artemis2hashcat Description Python3 implementation for converting Artemis PBKDF2WithHmacSHA1 hashes to hashcat format Usage The default configuration for Apache Artemis is to use the DefaultSensitiveStringCodec in order to store user passwords as PBKDF2WithHmacSHA1 hashes in the...

dnsglobe

dnsglobe A global DNS propagation checker for your terminal — a Rust TUI that queries 34 public DNS resolvers around the world in parallel, compares their answers, and shows the propagation of your record on a world map. Think dnschecker.org / whatsmydns.net, but in your terminal, with watch mode...

pyghidra-mcp

PyGhidra-MCP - Ghidra Model Context Protocol Server Overview pyghidra-mcp is a command-line Model Context Protocol MCP server that brings the full analytical power of Ghidra, a robust software reverse engineering SRE suite, into the world of intelligent agents and LLM-based tooling. It bridges...

poodle-PoC

Poodle PoC 🐩 🐩 🐩 A proof of concept of the Poodle Attack Padding Oracle On Downgraded Legacy Encryption : a man-in-the-middle exploit which takes advantage of Internet and security software clients' fallback to SSL 3.0 The Poodle attack allow you to retrieve encrypted data send by a client to a...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

WiseDelete

WiseDelfile Driver Wrapper A lightweight Windows utility that loads the WiseDelfile64.sys kernel driver, performs the required device handshake, and issues IOCTL requests to delete files that cannot be removed through standard Windows APIs. This project demonstrates how CVE-2025-66680 , can be us...

CVE-2020-9484

CVE-2020-9484 with interactive mode and args Designed specifically for CTF challenge CERTain Doom on TryHackMe Join Room https://tryhackme.com/r/room/certaindoom Remake of CVE-2020-9484 by Pentestical Shoutout to ChatGPT for the auto creation of interactive mode, and args :...

usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

CVE-2021-3129-exp

Laravel Debug Mode RCE Vulnerability CVE-2021-3129 POC / EXP CVE-2021-3129 EXP / POC ⚠️ Note: Due to the fact that exploitation and detection of this vulnerability require multiple requests, the process may be slow. Usage: python CVE-2021-3129.py usage: python CVE-2021-3129.py -u url --exp Laravel...

wifi-cracking

Wi-Fi Cracking Crack WPA/WPA2 Wi-Fi Routers with Airodump-ng and Aircrack-ng/Hashcat. This is a brief walk-through tutorial that illustrates how to crack Wi-Fi networks that are secured using weak passwords. It is not exhaustive, but it should be enough information for you to test your own...

EDR-Freeze

EDR-Freeze This is a tool that exploits the software vulnerability of WerFaultSecure to suspend the processes of EDRs and antimalware without needing to use the BYOVD Bring Your Own Vulnerable Driver attack method. EDR-Freeze operates in user mode, so you don't need to install any additional...

DNS_Tunneling

Intro Inspired by recent work I did involving Cobalt Strike DNS beacons, in conjunction with a mission statement to try and evade Microsoft Defender for Endpoint, I spent some time looking into how DNS might be used to transfer a payload to a target machine. I further wanted to challenge myself b...

mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection https://www.hahwul.com/p/mad-metasploit.html Awesome open awesome.md Add mad-metasploit to metasploit framework 1. config your metasploit-framework directory $ vim config/config.rb $metasploitpath =...

CVE-2021-3129

CVE-2021-3129 Laravel = v8.4.2 debug mode: Remote code execution CVE-2021-3129 Modified from @crisprss's https://github.com/crisprss/LaravelCVE-2021-3129EXP , added more available gadgets for traversal Use： python3 exp.py http://127.0.0.1:8888 Preview：...

VectorKernel

VectorKernel PoCs for Kernelmode rootkit techniques research or education. Currently focusing on Windows OS. All modules support x64 family 64bit OS only. Environment All modules are tested in Windows 11 x64. To test drivers, following options can be used for the testing machine: 1. Enable Loadin...

FalconEye

FalconEye: Real-time detection software for Windows process injections FalconEye is a windows endpoint detection software for real-time process injections. It is a kernel-mode driver that aims to catch process injections as they are happening real-time. Since FalconEye runs in kernel mode, it...

EATGuard

EATGuard Implementation of an export address table protection mitigation, like Export Address Filtering EAF How It Works This project is composed of three binaries that, when compiled, can be found in EATGuard\bin. They are: 1. EATGuardApplication.exe - "Malicious" application that loads...

CVE-2019-18935-exploit-study

CVE-2019-18935-exploit-study In-depth study of CVE-2019-18935 affecting Telerik UI for ASP.NET AJAX. Covers .NET deserialization vulnerability, RadAsyncUpload handler, gadget chains, mixed-mode assembly exploitation, and mitigation strategies...

CVE-2021-40903

Exploit Title: Antminer Monitor 0.5.0 - Authentication Bypass CVE: CVE-2021-40903 Date: 09/06/2021 Dork:https://www.zoomeye.org/searchResult?q=%22antminer%20monitor%22 Exploit Author: CQR.company / Vulnz. Vendor Homepage: https://github.com/anselal/antminer-monitor,...

CVE-2019-5420

CVE-2019-5420 PoC A remote code execution vulnerability in development mode Rails 5.2.2.1, 6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code...