dropengine

por @s0lst1c3 Versión actual: v0.1.0-alpha Compatible con Python 3.7+. Descripción general Las técnicas de evasión de defensas tienden a tener una vida útil corta, y esto es especialmente cierto para las técnicas utilizadas durante el acceso inicial. Debido a esto, los payloads de acceso inicial ...

SharpShooter

root@kitploit: / // / / // / / / \ / / / / \ / / / / / / / / / / / / // / / / // // / / / / // / // / // / / /// //,// / ./// /////// // Descripción SharpShooter es un marco de creación de payloads para la recuperación y ejecución de código fuente arbitrario en CSharp. SharpShooter es...

libenom

libenom ¿Qué es Libenom?? Libenom es una herramienta creada para hacer más fácil y rápida la creación de payloads con MSFvenom y obtener todos los datos generados ordenados. Requisitos Una distribución Linux para pentesting o Ubuntu, Debian, Mint Recomendado Kali Linux 2.0 sana o 2016.1 rolling,...

The-Axer

El axer reemplazará el procedimiento manual de crear tus payloads con msfvenom, haciéndolo más fácil y mucho más rápido Contacta al propietario EL AXER TE PERMITIRÁ ELEGIR LA PLATAFORMA, FORMATO, CODIFICADOR, Vincular con otro archivo y muchas otras características...

Freeze.rs

ESTE REPOSITORIO HA SIDO ARCHIVADO Para ver la última versión de Freeze.rs o enviar un problema, consulta https://github.com/Tylous/Freeze.rs. Freeze.rs Más Información Si quieres aprender más sobre las técnicas utilizadas en este framework, echa un vistazo al Blog de SourceZero y a la herramient...

Exploit for CVE-2025-7441

CVE-2025-7441 StoryChief - 1.0.42 - Unauthenticated Arbitrary...

EUVD-2022-48309

Malicious code in bioql PyPI...

hackingtool-v5.1

All in One Hacking tool For Hackers🥇 !https://img.shields...

hackingtool

This is an all-in-one hacking tool for hackers, written in Python. The tool is designed to be run on Linux, Kali Linux, or Parrot OS. It provides a menu-driven interface for various hacking tasks, including information gathering, wireless attacks, SQL injection, phishing, web attacks,...

LFI-zip-exploit

LFI Zip Exploit Tool A Python tool to exploit LFI Local File...

Social Warfare WordPress Plugin 3.5.2 - Remote Code Execution (RCE)

!/usr/bin/env python3 Exploit Title: Social Warfare WordPress Plugin 3.5.2 - Remote Code Execution RCE Date: 25-06-2025 Exploit Author: Huseyin Mardini @housma Original Researcher: Luka Sikic Original Exploit Author: hash3liZer Vendor Homepage: https://wordpress.org/plugins/social-warfare/ Softwa...

Picklescan failed to detect to some unsafe global function in Numpy library

Summary An unsafe deserialization vulnerability in Python’s pickle module allows an attacker to bypass static analysis tools like Picklescan and execute arbitrary code during deserialization. This can be exploited by import some built-in function in Numpy library that indrectly call some dangerou...

CVE-2022-45437 Stored cross-site scripting vulnerability in the reporting dashboard module

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting XSS. A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload...

vulhub

This repository is an offensive tool for vulnerability research and exploitation, specifically targeting various web applications and services. It contains a collection of exploits and tools for identifying and exploiting vulnerabilities in software and systems. The repository includes a variety ...

n+otes 1.6.2 - Denial of Service Exploit

Exploit Title: n+otes 1.6.2 - Denial of Service PoC Author: Geovanni Ruiz Download Link: https://apps.apple.com/us/app/n-otes/id596895960 Version: 1.6.2 Category: DoS iOS Vulnerability Color Notes is vulnerable to a DoS condition when a long list of characters is being used when creating a note:...

MoveKit - Cobalt Strike Kit For Lateral Movement

Movekit is an extension of built in Cobalt Strike lateral movement by leveraging the executeassembly function with the SharpMove and SharpRDP .NET assemblies. The aggressor script handles payload creation by reading the template files for a specific execution type. IMPORTANT: To use the script a...

Nsasoft Hardware Software Inventory 1.6.4.0 - 'multiple' Denial of Service (PoC)

Exploit Title: Nsasoft Hardware Software Inventory 1.6.4.0 - 'multiple' Denial of Service PoC Exploit Author : Enes Özeser Exploit Date: 2021-02-28 Vendor Homepage : https://www.nsauditor.com/ Link Software : https://www.nsauditor.com/downloads/nhsisetup.exe Version: 1.6.4.0 Tested on: Windows 10...

ScareCrow - Payload Creation Framework Designed Around EDR Bypass

If you want to learn more about the techniques utlized in this framework please take a look at Part 1 and Part 2 Description ScareCrow is a payload creation framework for generating loaders for the use of side loading not injection into a legitimate Windows process bypassing Application...

TaskCanvas 1.4.0 - Registration Denial Of Service

TaskCanvas 1.4.0 - Registration Denial Of Service Exploit Title: TaskCanvas 1.4.0 - 'Registration' Denial Of Service Exploit Author : Ismail Tasdelen Exploit Date: 2020-01-06 Vendor Homepage : https://www.digitalvolcano.co.uk/ Link Software : https://www.digitalvolcano.co.uk/taskcanvasdownload.ht...

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of Service

Exploit Title: WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of Service Vendor Homepage:https://www.alloksoft.com/ Software Link: https://www.alloksoft.com/wmv.htm Exploit Author: Nithoshitha S Tested Version: v4.6.1217 Tested on: Windows 7 x64 Windows XP SP3 1.- Run python code :poc.py 2.-...