Hwacha

Hwacha https://www.n00py.io/2017/12/raining-shells-on-linux-environments-with-hwacha/ Hwacha is a tool to quickly execute payloads on Nix based systems. Easily collect artifacts or execute shellcode on an entire subnet of systems for which credentials are obtained. $python hwacha.py &&&& && && &&...

trojanizer

TROJANIZER Version release : v1.1 Stable Author : pedro ubuntu r00t-3xp10it Codename: TroiaRevisited Distros Supported : Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam develop @2017 FRAMEWORK DESCRIPTION The Trojanizer tool uses WinRAR SFX to compress the two files input by...

CVE-2024-25897

parameters ip, port, path exploit output Help panel exploit explanation Here is the explanation of the code in Markdown: Code Explanation This script is designed to exploit a specific vulnerability in Jenkins CVE-2024-23897. It allows downloading a JAR file from a Jenkins server and executing a...

Beleth

Beleth Dictionary based SSH cracker Usage: ./beleth OPTIONS -c payload Execute payload on remote server once logged in -h Display this help -l threads Limit threads to given number. Default: 4 -p port Specify remote port -P password Use single password attempt -t target Attempt connections to thi...

CVE-2017-9779

Automatic execution Payload From Windows By Path Users :: What is ? Cmder Cmder is a software package created out of pure frustration over the absence of nice console emulators on Windows. It is based on amazing software, and spiced up with the Monokai color scheme and a custom prompt layout,...

pyrdp

PyRDP PyRDP — это инструмент и библиотека на Python для атак «Monster-in-the-Middle» MITM на протокол удалённого рабочего стола RDP. Он включает несколько инструментов: RDP Monster-in-the-Middle Регистрирует учётные данные в открытом виде или хэши NetNTLM, используемые при подключении Перехватыва...

reverse-shell

reverse-shell Reverse Shell en tant que service - https://reverse-shell.sh Reverse shell facile à retenir qui devrait fonctionner sur la plupart des systèmes de type Unix. Détecte les logiciels disponibles sur la cible et exécute une charge utile appropriée. Utilisation 1. Écouter une connexion...

NyxInvoke

NyxInvoke NyxInvoke — это универсальный инструмент на Rust, предназначенный для выполнения .NET-сборок, команд/скриптов PowerShell, Beacon Object Files BOF и PE-файлов со встроенными возможностями снятия хуков Ntdll и обхода AMSI и ETW без патчинга. Его можно скомпилировать как в виде автономного...

CVE-2025-48384

PoC для CVE-2025-48384 См. CVE-2025-48384 Для запуска: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Пример вывода: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning into 'test'... done. 'ubmodul...

CVE-2021-40444--CABless

CVE-2021-40444--Version CABless Mise à jour : Code modifié pour ne plus dépendre des archives CAB le fichier « index.html » qui déclenche l'exécution de la charge utile ne contiendra qu'une seule ligne de code, à l'intérieur de la balise 'script' : Un article au format PDF est fourni. Mise à jour...

drow

drow Description TL;DR drow est un utilitaire en ligne de commande utilisé pour injecter du code et modifier le point d'entrée d'exécutables ELF post-compilation. Il prend en entrée des exécutables ELF non modifiés et produit un ELF modifié contenant une charge utile intégrée fournie par...

horrors-log4shell

horrors-log4shell A micro lab playground? for CVE-2021-44228 log4j Can be used for executing payloads against multiple targets. Target-specific payloads are generated runtime. Adjustable configuration and bypasses. Installation Java-related requirements Development / Running example Gradle Maven ...

CVE-2024-26169-Detail-1

CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Installation 1. Copy the cve201711882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local...

CVE-2017-11882-metasploit

CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Installation 1. Copy the cve201711882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local...

CVE-2025-8088

CVE-2025-8088 – Эксплойт WinRAR Этот репозиторий содержит генератор вредоносных RAR-файлов , который эксплуатирует уязвимость CVE-2025-8088 в WinRAR, позволяя внешне легитимному файлу выполнить полезную нагрузку, когда жертва извлекает его. Рекомендуемая команда python3 exploit7.12.py \ -p...

CVE-2022-1388

CVE-2022-1388 PoC for CVE-2022-1388 affecting F5 BIG-IP. Usage $ ./poc.sh --help Usage: poc.sh --help --file FILE --scan --exploit --payload PAYLOAD CVE-2022-1388 PoC script. One or multiple IPs can be scanned. Arguments: --help Show this help message and exit. --file FILE File list containing on...

MAL-2026-16127 Malicious code in eth-account-web3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b69dc345e5f7b75dbe6dccaf3dfc013a98e302176130aac064cbd8d042bae7 The distribution eth-account-web3 installs under the import name ethaccount, colliding with the legitimate ethereum/eth-account library. On import,...

EXPLOITER

EXPLOITER: Explotación automatizada para CVE-2024-0044 EXPLOITER es una herramienta sofisticada diseñada para la explotación automatizada de vulnerabilidades CVE-2024-0044. Este script simplifica el proceso de explotación de aplicaciones Android vulnerables automatizando el despliegue del payload...

Malicious code in ts-rand-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f3c43a89866228b5365b9e318da3ea953bb2c5b7da94136d887359e8e1f07a8 Package presents itself as a random transactions SDK exposing a single API, getTransactionscount. Following that documented usage triggers a hidden...

MAL-2026-13301 Malicious code in dolyame-boxy-desktop-bnpl-card-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e20a9180ff2928b0498496b59c96983db044063b8db7c5e258b6518d5daf00a On require of this package, index.js loads bridge.js which downloads a platform-specific binary from hardcoded Cloudflare Workers hosts...