OWA-Password-Sprayer

OWA-Password-Sprayer OWA Password Sprayer This Python script facilitates password spraying against Outlook Web Access OWA endpoints. Password spraying is a technique used to test a single password against multiple usernames, aiming to find valid credentials for accessing the OWA. Features: Suppor...

CVE-2020-0796-Batch-scanning

CVE-2020-0796 Batch scanning Since other scanning tools have a high false positive rate for CVE-2020-0796 verification, and Qi'anxin's tool cannot batch specify IPs. So I casually wrote this, place IPs in a txt file, use Qi'anxin scanning tool with multi-threaded scanning, but the CPU usage is...

CVE-2022-26134-POC

Description： This is a script tool that supports multi-threaded batch detection of Confluence OGNL injection vulnerability CVE-2022-26134 Usage: The file url.txt contains the target addresses Results: 1. Single target detection 2. Batch detection Successful detection will be highlighted in yellow...

dcrawl

dcrawl dcrawl es un rastreador web simple, pero inteligente, de múltiples hilos para recolectar aleatoriamente enormes listas de nombres de dominio únicos. ¿Cómo funciona? dcrawl toma una URL de sitio como entrada y detecta todos los enlaces en el cuerpo del sitio. Cada enlace encontrado se coloc...

patator

Patator Patator fue escrito por frustración al usar Hydra, Medusa, Ncrack, módulos de Metasploit y scripts NSE de Nmap para ataques de adivinación de contraseñas. Opté por un enfoque diferente para no crear otra herramienta de fuerza bruta y evitar repetir las mismas deficiencias. Patator es una...

orbitaldump

OrbitalDump Una herramienta simple de fuerza bruta SSH distribuida y multi-hilo escrita en Python. Cómo funciona Cuando el script se ejecuta sin la opción --proxies, actúa como cualquier otro script de fuerza bruta SSH multi-hilo. Cuando se añade la opción --proxies, el script obtiene una lista...

dirstalk

Dirstalk Dirstalk es una aplicación multi-hilo diseñada para realizar fuerza bruta de rutas en servidores web. La herramienta contiene funcionalidades similares a las ofrecidas por dirbuster y dirb. Aquí puedes verla en acción: Contenido Cómo usarlo Escaneo Recursos útiles Generador de diccionari...

c-jwt-cracker

JWT cracker Un cracker de JWT por fuerza bruta multi-hilo escrito en C. Si tienes mucha suerte o un enorme poder de cómputo, este programa debería encontrar la clave secreta de un token JWT, permitiéndote falsificar tokens válidos. Esto es solo para fines de prueba, no te metas en problemas :...

CVE-2025-24813-Exploit

CVE-2025-24813-Exploit Apache Tomcat Remote Code Execution RCE Exploit - CVE-2025-24813 🚀 Apache Tomcat RCE Exploit - CVE-2025-24813 🔥 Exploit & Detection Tool for Apache Tomcat RCE CVE-2025-24813 This repository contains a PoC Proof of Concept exploit for the Apache Tomcat Remote Code Execution...

EBurst

EBurst 0.1 This script mainly provides account brute-forcing functionality for Exchange mail servers, integrating brute-force methods for existing mainstream interfaces. After searching around the internet for tools, I didn't find any particularly excellent ones, and they didn't quite match my ow...

cdn-ip-scanner

CDN IP Scanner V3.0 High Accuracy • Ultra Fast • Real-Time 🌐 Language: English | فارسی Install • Features • Usage • What's new • Developers • Donate 📚 Table of Contents 1. Overview 2. Features 3. Installation npm app Windows / macOS / Linux — step by step Android app Linux server Release files &...

CVE-2017-9841

🔍 Features Multi-threaded scanning for efficient testing of multiple targets Intelligent payload generation with unique identifiers for accurate validation Multiple vulnerability path checking across common web application structures Automatic response validation to confirm actual vulnerabilities...

CVE-2026-41940

CVE-2026-41940 A security research tool for detecting and analyzing cPanel/WHM services and their authentication behavior. Designed for authorized testing and educational purposes only. cPanel Security Scanner Research Tool This project is a security research tool designed to analyze and detect...

cve-2025-3248

CVE-2025-3248 Langflow RCE Scanner A Python tool for scanning and exploiting the CVE-2025-3248 vulnerability, which allows remote code execution RCE in Langflow applications. Features Single-target scanning and command execution Batch URL scanning Interactive shell mode Multi-threaded batch...

FOFA-API-Threaded-Searcher

FOFA API Threaded Searcher A powerful multi‑threaded Python tool to query the FOFA Fofa.so API, extract selected fields, and save unique results with intelligent formatting. ✨ Features Multi‑threaded – Fetch multiple pages concurrently configurable threads Custom fields – Choose any valid FOFA...

livewire-vuln-scanner

Livewire Passive Vulnerability Scanner Livewire Passive Vulnerability Scanner is a Python 2.7 tool designed to passively detect Livewire versions used by websites and identify potential vulnerabilities based on version comparison. This scanner does not exploit any vulnerability. It only analyzes...

Gitlab-CVE-2021-22205

Gitlab-CVE-2021-22205 Multi-threaded batch detection script for CVE-2021-22205 Use dnslog with poc for detection Use multi-threading for detection Custom command execution...

CVE-2025-0133

Description: It is a POC for CVE-2025-0133 that is applicable only to PAN-OS firewall configurations with an enabled GlobalProtect gateway or portal. It checks issue on multiple URLs that accepts from file, with custom thread. You can also set you timeout and get results in a file. Example usage:...

bpnd-libssh

bpnd-libssh blueintel bpnd-libssh is a multi-threaded, remote scanner for CVE-2018-10933. Requirements python3 paramiko module Install Example: apt-get update apt-get install -y libffi-dev libssl-dev pip3 install paramiko Install with docker To build docker container: ./dockerbuild.sh To run dock...

curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

A flaw was found in curl. When performing multi-threaded LDAPS Lightweight Directory Access Protocol Secure transfers, changes to Transport Layer Security TLS options in one thread could inadvertently apply globally, affecting other concurrent transfers. This could lead to unintended security...