Nosql-MongoDB-injection-username-password-enumeration

Nosql injection username and password enumeration script Using this script, we can enumerate Usernames and passwords of Nosqlmongodb injecion vulnerable web applications. Exploit Title: Nosql injection username/password enumeration. Author: Kalana Sankalpa Anon LK. Website:...

ipChecker

ipChecker Tool to check if a given IP is a node tor or an open proxy. Why? Sometimes all your throttles are not enough to stop brute force attacks or any kind of massive attacks, so it can help you to drop, some attackers who use tor or open proxies. How it works The ipChecker has some plugins...

swarm

swarm v0.6.0 English | 中文. Swarm is an open source modular distributed penetration testing Tool that use distributed task queue to implement communication in the master-slave mode system and use MongoDB for data storage. It consists of a distributed framework and function modules. The function...

CVE-2025-14847-MongoBleed-Exploit

CVE-2025-14847 - MongoBleed 👨‍💻 Author: Furkan KAYAPINAR @FurkanKAYAPINAR ⚠️ EDUCATIONAL PURPOSE ONLY Lab environment and exploit script for the critical unauthenticated memory-leak vulnerability in MongoDB Server. 📋 Table of Contents Vulnerability Overview Affected Versions Installation Lab...

MongoBleed-exploit

CVE-2025-14847: MongoBleed Laboratory logo.svg Table of Contents 1. Introduction 2. Vulnerability Details How it Works 3. Impact 4. Lab Architecture 5. Prerequisites 6. Installation and Usage 1. Start the Environment 2. Install Dependencies 3. Verify Lab Setup Optional 4. Run the Exploit 7...

kimi

Kimi: Attack Surface Discovery Engine Developed with 💜 by @alechilczenko Project Context: This project serves as a portfolio piece demonstrating concepts in offensive security, concurrency, and distributed architecture. 1. Introducing Kimi: The Origin Story What was Kimi ? During my early days...

CVE-2022-22980

CVE-2022-22980 A local based poc of CVE-2022-22980, for the detail of this vulnerability see https://tanzu.vmware.com/security/cve-2022-22980. You need to install mongodb on locahost before running. And I've create a web based poc with docker on dockerv Run mvn spring-boot:run or open with IDEA,...

recon-ninja

recon-ninja The tool is a GitHub repository that provides a recon tool that lets you upload your domain discovery through an upload option. The tool utilizes HTTPX, which is a tool that scans for alive domains. The tool also has an integrated MongoDB Atlas database, which is a cloud-based databas...

cve-search

cve-search cve-search is a tool to import CVE Common Vulnerabilities and Exposures and CPE Common Platform Enumeration into a MongoDB to facilitate search and processing of CVEs. The main objective of the software is to avoid doing direct and public lookups into the public CVE databases. Local...

cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . auto install script What is Cuckoo Sandbox? Cuckoo Sandbox is a malware analysis system. What does that mean? It means that you can throw any suspicious file at it and get a report with details about the file's behavior inside an isolated environment. We...

steamer

Steamer Import, manage, search public dumps. Do you have massive amounts of CSV, .sql, .txt, that have credentials, passwords, and hashes inside? Use Steamer to manage them! Load them into a MongoDB database, and either use the console directly, or just use the handy web interface complete with...

MAD-CAT

MAD-CAT Meow Attack Data Corruption Automation Tool Overview MAD-CAT Meow Attack Data Corruption Automation Tool is a comprehensive security tool designed to simulate data corruption attacks against multiple database systems. The tool supports both single-target attacks and bulk CSV-based attack...

Pollenisator

Pollenisator is a tool aiming to assist pentesters and auditor automating the use of some tools/scripts and keep track of them. Written in python 3 Provides a modelisation of "pentest objects" : Scope, Hosts, Ports, Commands, Tools etc. Tools/scripts are separated into 4 categories : wave,...

pritunl

pritunl: enterprise vpn server Pritunl is a distributed enterprise vpn server built using the OpenVPN protocol. Documentation and more information can be found at the home page pritunl.com Install From Source Install MongoDB if running single host configuration sudo tee...

xvna

XVNA Extreme Vulnerable Node Application XVNA is an extreme vulnerable node application coded in NodejsExpressjs/MongoDB that helps security enthusiasts to learn application security. it's not counseled to host this application online as it is intended to be Vulnerable. We tend to suggest hosting...

leakScraper

leakScraper mongodb version LeakScraper is an efficient set of tools to process and visualize huge text files containing credentials. These tools are designed to help pentesters/redteamers doing OSINT, credentials gathering and credentials stuffing attacks. Installation First things first : have ...

CVE-2025-14847-MongoDB

CVE-2025-14847-MongoDB Memory Disclosure Research Tool Overview This repository contains an educational research tool designed to demonstrate the memory safety concepts behind CVE-2025-14847, a critical vulnerability discovered in MongoDB's BSON decompression implementation. The tool simulates ho...

mongobleed

mongobleed CVE-2025-14847 - MongoDB Unauthenticated Memory Leak Exploit A proof-of-concept exploit for the MongoDB zlib decompression vulnerability that allows unauthenticated attackers to leak sensitive server memory. Vulnerability A flaw in MongoDB's zlib message decompression returns the...

cve-2025-14847

MongoBleed: CVE-2025-14847 Memory Leak Discovery Tool MongoBleed is a high-performance security auditing tool designed to detect and demonstrate CVE-2025-14847. This vulnerability allows an unauthenticated, remote attacker to leak fragments of uninitialized heap memory from a MongoDB server by...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with Alexcyberx 🔥 About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...