PurplePanda

PurplePanda This tool fetches resources from different cloud/saas applications focusing on permissions in order to identify privilege escalation paths and dangerous permissions in the cloud/saas configurations. Note that PurplePanda searches both privileges escalation paths within a platform and...

flowsint

Flowsint Flowsint is an open-source OSINT graph exploration tool designed for ethical investigation, transparency, and verification. Ethics: Please read ETHICS.md for responsible use guidelines. https://github.com/user-attachments/assets/eaabfa81-d7b3-414d-8cf7-f69b4e37bab6...

strutsy

Strutsy Strutsy - Mass exploitation of Apache Struts CVE-2017-5638 vulnerability. Includes blind and time based code injection techniques which significantly reduces false negatives. Other features include mass URL imports to scan multiple targets in one go. Usage: python strutsy.py urls.txt...

DarkFox

DarkFox Remote access trojan created using WinRar with an installer ex. firefox and python Reverse Shell embedded. Edit the client.py file by setting IP and port of the attacking Server listening and IP and port of any proxy present in the attack machine.If there is not a proxy comment the relati...

pefile

pefile pefile is a multi-platform Python module to parse and work with Portable Executable PE files. Most of the information contained in the PE file headers is accessible, as well as all the sections' details and data. The structures defined in the Windows header files will be accessible as...

spurt

Spurt Introduction Spurt is a powerful stress testing tool designed to simulate high volumes of traffic and evaluate the performance and resilience of web servers. It has been tested on Linux. Spurt first checks if the target URL is valid. A custom module is used to generate common "User-Agent" a...

ssh-tpm-agent

SSH agent for TPM ssh-tpm-agent is a ssh-agent compatible agent that allows keys to be created by the Trusted Platform Module TPM for authentication towards ssh servers. TPM sealed keys are private keys created inside the Trusted Platform Module TPM and sealed in .tpm suffixed files. They are bou...

gitlab-cve-2020-10977

GitLab CVE2020-10977 Introduction This script provides remote code execution against GitLab Community Edition CE and Enterprise Edition EE. The CVE is an arbitrary file read which allows you to extract the Rails secretkeybase by downloading the GitLab secrets.yaml file. Which in turn, enables you...

CVE-2026-31431-Checker-Mitigator

CVE-2026-31431 Checker & Mitigator A simple, safe vulnerability scanner and mitigation tool for CVE-2026-31431 aka "Copy Fail", a local privilege escalation vulnerability in the Linux kernel's AFALG cryptographic interface. Note - It is fully vibe coded Script About the Vulnerability CVE :...

tiktok-scraper

TikTok Scraper & Downloader Scrape and download useful information from TikTok. No login or password are required This is not an official API support and etc. This is just a scraper that is using TikTok Web API to scrape media and related meta information. Content Features To Do Contribution...

lacuna-rs

lacuna-rs Ghost-frame call-stack spoofing + runtime indirect syscalls for Windows x64 — ported to Rust. Ported from LACUNA Chain lacunachain.c by Mohamed Alzhrani 0xmaz. lacuna-rs is a reusable Rust crate that provides the same primitives as the original C TTP, structured so it can be dropped int...

Exploit-Index

💀 Exploit-Index: The Ultimate CVE Proof of Concept PoC & Exploit Database 150,000+ Verified Exploits & PoCs for Cybersecurity Research All In One Place Explore the Interactive Portal • View the JSON Index • Browse CVEs 📖 Abo...

dotdotpwn

DESCRIPTION DotDotPwn - The Directory Traversal Fuzzer It's a very flexible intelligent fuzzer to discover traversal directory vulnerabilities in software such as HTTP/FTP/TFTP servers, Web platforms such as CMSs, ERPs, Blogs, etc. Also, it has a protocol-independent module to send the desired...

erica

Erica A neighbor for the GreatFET One targeting the 315/433/868/915MHz bands. This neighbour is not a design from GreatScottGadgets. So if it does not work, don't blame GSG but me. Name The arms of the plant erica remind me a bit to antennas. And that is what Erica shall be about. A neighbor with...

obex

Obex - DLL Blocking Obex is a PoC tool/technique that can be used to prevent unwanted modules e.g., EDR or monitoring libraries from being loaded into a newly started process during process initialization or at runtime. Features Spawns any process with arguments under debug control. Blocks a...

CVE-2025-7783-poc

form-data boundary randomness vulnerability CVE-2025-7783 Largely based on https://hackerone.com/reports/2913312 by https://hackerone.com/parrot409?type=user Installing: npm install Make sure you have python3 installed with the z3 module pip3 install -r requirements.txt -- the exploit code shells...

Bella

Bella Bella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎 💻 What is it? Bella is a robust, pure python, post-exploitation and remote administration tool for macOS. Bella a.k.a. the server is an SSL/TLS encrypted reverse shell that can be dropped on...

StealthRL

StealthRL: Reinforcement Learning Paraphrase Attacks for Multi-Detector Evasion of AI-Text Detectors Paper arXiv Demo Model Hugging Face Benchmark Dataset Hugging Face Abstract AI-text detectors are increasingly used in high-stakes settings, yet their robustness to meaning-preserving adversarial...

ActiveReign

ActiveReign ⚠️ Thank you for your support. This project is no longer publicly maintained. Background A while back I was challenged to write a discovery tool with Python3 that could automate the process of finding sensitive information on network file shares. After writing the entire tool with...

salus

Salus: Guardian of Code Safety and Security 🔍 Overview Salus Security Automation as a Lightweight Universal Scanner, named after the Roman goddess of protection, is a tool for coordinating the execution of security scanners. You can run Salus on a repository via the Docker daemon and it will...