4036 matches found
react2shell-detector
Detector de React2Shell Una extensión de Chrome para detectar vulnerabilidades React2Shell CVE-2025-55182 y CVE-2025-66478 en aplicaciones web. Descripción general React2Shell Detector es una extensión de navegador que ayuda a investigadores de seguridad y desarrolladores web a identificar posibl...
CVE-2026-50522
CVE-2026-50522 Microsoft SharePoint CVE-2026-50522 cargas útiles y análisis. Peticiones HTTP request| src| user-agent| encoding| unique id| payload ---|---|---|---|---|--- 816978882| 45.63.58.216| Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36| '|...
CVE-2021-44228-Log4j-Payloads
Este repositorio no tiene un README...
Root-My-Galaxy
Root My Galaxy Root My Galaxy es un instalador de un solo clic para combinaciones de modelo y kernel de Samsung explícitamente compatibles. La aplicación en sí se mantiene separada de los offsets de dispositivo, los payloads nativos de explotación y los artefactos de compilación de KernelSU. Últi...
mjet
mjet Mogwai Security Java Management Extensions JMX Exploitation Toolkit mjet is a tool that can be used to protect insecure configured JMX services. It is based on the blog post "Exploiting JMX-RMI" from Braden Thomas/Accuvant "http://www.accuvant.com/blog/exploiting-jmx-rmi" and can be used to...
JavaPayload
JavaPayload JavaPayload es una colección de payloads Java puros para usar en la post-explotación desde exploits Java puros o desde configuraciones incorrectas comunes como el administrador de Tomcat sin protección por contraseña o el puerto del depurador. La documentación desactualizada se puede...
An Evaluation of the Semantic Understanding Capabilities of Large Language Models for Web Attack Payloads
Computer vision services delivered through Web interfaces and APIs process textual requests for image-resource acquisition, inference-task configuration, and result management, making Web attack-payload analysis relevant to their deployment security. Large language models LLMs can identify payloa...
CVE-2025-55182POC
CVE-2025-55182 React Server Components RCE POC This project is a CVE-2025-55182 - React Server Components RSC RCE Proof of Concept , demonstrating remote code execution triggered under specific conditions via vm.runInThisContext and malicious ACTION payload. Python side: Automates sending malicio...
CVE-2025-24813-PoC
CVE-2025-24813-PoC CVE-2025-24813 affects Apache Tomcat - if it's a vulnerable version and spectacularly misconfigured, an attacker can get RCE with one GET and one POST. More info here This is Yiheng An, Jun Li, Qiang Liu, Haozhe Zhang, Qi Deng's script from the recent writeup modified to accept...
CVE-2025-55182-Scanner
CVE‑2025‑55182 – Next.js RSC Deserialization RCE Scanner This tool checks whether a target is vulnerable to CVE‑2025‑55182 , a Remote Code Execution bug caused by unsafe handling of RSC React Server Components model payloads inside Next.js. The vulnerability chains Prototype Pollution →...
Log4J-Scanner
Burp extension to scan Log4Shell CVE-2021-44228 vulnerability with custom payloads. Disclaimer I am not responsible for your actions, burp-suite freezing, target getting hacked, thermonuclear war, or the current economic crisis caused by you following these directions. YOU are choosing to use thi...
POC-CVE-2025-24813-Apache-Tomcat-Remote-Code-Execution
⚠️🚀 CVE-2025-24813 — Apache Tomcat RCE Exploitation Suite ⚡ Version: 1.0 🛡️ CVE ID: CVE-2025-24813 Apache Tomcat RCE 🧬 Payloads: ysoserial / Java 🌐 Modo: Interactivo + Stealth 🔬 Uso: Ético, Investigativo, Educativo 🌌 Visión General Esta herramienta ha sido diseñada como una suite de explotación...
CVE-2025-30208
🔥 Vite Dev Server Vulnerability Scanner CVE-2025-30208 🚀 Overview This tool scans for CVE-2025-30208, a vulnerability in the Vite Dev Server. It allows security researchers to quickly detect vulnerable instances using multiple payloads. ⚡ Features ✅ Single URL scanning -u URL ✅ Mass scanning from...
Root-My-Galaxy-tests
Root My Galaxy Root My Galaxy es un instalador de un solo clic para compilaciones de firmware Samsung explícitamente compatibles. La aplicación en sí se mantiene separada de los offsets de dispositivo, los payloads de exploits nativos y los artefactos de compilación de KernelSU. Última versión El...
-cve-2025-55182
CVE-2025-55182 Mass / Single URL Detection Script image An efficient CVE-2025-55182 vulnerability detection tool, supporting single URL quick detection and batch URL detection, automatically generating detailed Excel detection reports, and outputting complete log files. 🔥 Core Features Supports...
weaponised-XSS-payloads
Payloads de XSS armados Payloads XSS diseñados para convertir alert1 en un P1. La entrada del blog Este repositorio se publicó junto con un artículo de blog titulado "How to Upgrade Your XSS Bugs from Medium to Critical" https://medium.com/@hakluke/upgrade-xss-from-medium-to-critical-cb96597b6cc4...
CVE-2026-66054
A flaw was found in the Apache Thrift C++ bindings. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted, highly compressed data payloads. Because the software does not properly restrict resource allocation during decompression, processing these...
dissect.cobaltstrike
Dissecting Cobalt Strike using Python .. image:: https://github.com/fox-it/dissect.cobaltstrike/actions/workflows/dissect-ci.yml/badge.svg :target: https://github.com/fox-it/dissect.cobaltstrike/actions/workflows/dissect-ci.yml :alt: GitHub Actions status .. image::...
img-payloads
⚠️ Aviso legal : El contenido de este repositorio es únicamente con fines educativos e informativos; los autores no se hacen responsables del mal uso. Asegúrate de obtener la autorización adecuada antes de usarlo, actúa con responsabilidad bajo tu propio riesgo y cumple con todas las pautas legale...