vuln_test_repo_public_ruby_gemfile_cve-2016-6317

This repository does not have a README...

BucketLoot

BucketLoot An Automated S3-compatible Bucket Inspector Description • Installation • Features • Documentation • Acknowledgements Description BucketLoot is an automated S3-compatible Bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as we...

CVE-2020-15492

CVE-2020-15492 This vulnerablity was discovered and disclosed by me. This repository will hold the advisory, exploits and the setup executable of the vulnerable software for one to experiment with this vulnerability. This repository is only for educational purposes. Links Advisory SYSS-2020-028...

subdosec

Subdosec Escáner de apropiación de subdominios y herramienta de reconocimiento. Instalación • Uso • Basado en Web • Contribución • Escaneo en línea • Agradecimientos Subdosec es un escáner de apropiación de subdominios rápido y preciso sin falsos positivos, que cuenta con una base de datos públic...

HijackLibs

HijackLibs This project aims to keep a record of publicly disclosed DLL Hijacking opportunities. You can find the web version of this repository on https://www.hijacklibs.net. Licence : GPLv3.0 Code of Conduct : Contributor Covenant Contribution guide YAML Schema used by the project Sample YAML...

CVE-2024-23334-PoC

CVE-2024-23334-PoC Una prueba de concepto de la vulnerabilidad de path traversal en la librería python AioHTTP = 3.9.1 asegúrate de encontrar un directorio público válido como "/static/" o "/assets/" Una vez que lo encuentres, ve a main.py y reemplaza la cadena /static/ por la que hayas encontrad...

CVE-2022-36804-ReverseShell

Proyecto Original https://github.com/BenHays142/CVE-2022-36804-PoC-Exploit CVE-2022-36804-PoC-Exploit Un exploit PoC algo fiable para CVE-2022-36804 Inyección Crítica de Comandos en BitBucket. Este ataque generalmente requiere que los repositorios públicos estén habilitados, sin embargo, las...

curveball

curveball CVE-2020-0601 curveball - Alternative Key Calculator Build Windows Visual Studio 2012 or , then build the solution. Linux / Unix cc altkey.c -lcrypto -o altkey Usage Usage: altkey ecpubliccertificate.pem ecnewprivatekey.pem Example root@kitploit: C:\security\curveball\Releasealtkey...

rocacheck

rocacheck Package rocacheck is a Go implementation of the key fingerprint algorithm that checks if an RSA key was generated by broken Infineon code and is vulnerable to factorization via the Return of Coppersmith's Attack ROCA / CVE-2017-15361...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...

winevt_logs_analysis

Winevt logs analysis Remote connections Simple script for the purpose of finding remote connections to Windows machine and ideally some public IPs. It checks for some EventIDs regarding remote logins and sessions. You should pip install -r requirements.txt so the script can work and parse some of...

winevt_logs_analysis

Análisis de registros de Winevt Conexiones remotas Script simple para encontrar conexiones remotas a máquinas Windows e idealmente algunas IPs públicas. Comprueba algunos EventIDs relacionados con inicios de sesión y sesiones remotas. Debes ejecutar pip install -r requirements.txt para que el...

CVE-2020-1472

CVE-2020-1472 CVE-2020-1472 exploit来源: https://github.com/dirkjanm/CVE-2020-1472 https://github.com/SecuraBV/CVE-2020-1472...

bucket-stream

🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...

PoC-public

PoC-public This repository collects PoC code that we published at various security conferences. Black Hat EU 2020 CODE BLUE 2021 Black Hat Asia 2023 CODE BLUE 2023...

cve-2019-13720

cve-2019-13720 CVE-2019-13720 Exploit Tools 05 Nov 2019: Release POC: https://www.youtube.com/watch?v=0HdRJImwYww 06 Nov 2019: Release Tool. [email protected]...

web

I have no data yet. It is a capital mistake to theorize before one has data. Insensibly one begins to twist facts to suit theories, instead of theories to suit facts. 🚧 ⚠️ Work in progress; Not ready for use,yet ⚠️ 🚧 Introducing OSINTBuddy Welcome to the OSINTBuddy project where you can connect,...

getsploit

Getsploit Busca y descarga exploits públicos de la base de datos deVulners — en línea, o totalmente sin conexión desde un índice local...

theZoo

theZoo - Un Repositorio de Malware Vivo theZoo es un proyecto creado para hacer que la posibilidad del análisis de malware sea abierta y accesible al público. Dado que descubrimos que casi todas las versiones de malware son muy difíciles de conseguir de una manera que permita su análisis, hemos...

cve-2020-0601_poc

Basic Info The source code of this tool is supposed to help with understanding of CVE-2020-0601 vulnerability discovered in Windows Crypto API, see CERT's overview. The tool itself can be used to produce a certificate for an arbitrary domain which will be signed by an evil certificate authority...