test_cve-2023-46747

Python script to test if a F5 BIG-IP is vulnerable for CVE-2023-46747. When vulnerable a user account with administrator rights is added. To mitigate this vulnerability, see: https://my.f5.com/manage/s/article/K000137353...

CVE-2018-8174_EXP

CVE-2018-8174EXP usage: CVE-2018-8174.py -h -u URL -o OUTPUT -i IP -p PORT Exploit for CVE-2018-8174 optional arguments: -h, --help show this help message and exit -u URL, --url URL exp url -o OUTPUT, --output OUTPUT Output exploit rtf -i IP, --ip IP ip for netcat -p PORT, --port PORT port for...

CVE-2024-6387-exploit

SSH Vulnerability Scanner The SSH Vulnerability Scanner is a Python script that uses Nmap to scan a list of domains for vulnerable SSH versions. It checks multiple ports for SSH services and identifies versions that are known to have security vulnerabilities. Features Scans multiple domains from ...

ProxyLogon-CVE-2021-26855

ProxyLogon-CVE-2021-26855 RCE exploit for ProxyLogon vulnerability in Microsoft Exchange Working with Python 3.9 Usage: python proxylogonrce.py target email command Example: python proxylogonrce.py 192.168.227.137 [email protected] whoami All credits go to DEVCORE, based on...

f5_rce_poc

Usage python3 f5rce.py -u 指定目标URL -f 批量检测文件 -c 执行命令 -s/--ssrf 通过ssrf获得token执行命令 The effect is as shown below: python3 f5rce.py -u 127.0.0.1 --ssrf After executing the command, enter exit to exit PS: The output is not elegant enough, I will modify it 😁 Future Updates: Fixed some command execution...

spring4shell_behinder

Spring4shellbehinder What is this? A batch rapid exploitation tool for the Spring4Shell vulnerability CVE-2022-22965. Contributors 4nth0ny @Friday Lab Issues/PRs are welcome. : Environment python 3.x Behinder3.0 Beta9 Installation python3 -m pip install -r requirements.txt Usage python3...

CVE-2020-17519

Usage & Disclaimer This script is for batch detection of the Apache Flink directory traversal vulnerability CVE-2020-17519. Usage: Python CVE-2020-17519.py urls.txt Each line in urls.txt contains one URL. Vulnerable addresses are output in vul.txt. Affected Versions: Apache Flink 1.11.0, 1.11.1,...

CVE-2023-1545

CVE-2023-1545 Simple SQL Injection Python script for Teampass prior to versions 3.0.0.23, leveraging CVE-2023-1545. More information on this blog. Usage Just use set the URL where Teampass is running as unique argument: python3 CVE-2023-1545.py http://example.com:8080 Discliamer Use it for ethica...

shadowhammer

批量模式 Shadowhammer MAC 地址检查工具 卡巴斯基近期发现并分析了“Shadowhammer”攻击（https://securelist.com/operation-shadowhammer/89992）。他们做了出色的分析，并发布了一款供系统管理员使用的工具，以判断其系统是否成为攻击目标。然而，已发布的工具不太容易脚本化，因此我们创建了这个小型 Python 脚本来解决这一问题。我们采用了卡巴斯基自家工具中的哈希值，并将其封装在一个简洁的命令行 Python 界面中（该工具也可离线使用，以解决潜在的隐私问题）。 使用方法...

CVE-2024-6387

CVE-2024-6387 Installation and Execution of the Script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: git clone...

CVE-2021-23017

CVE-2021-23017 CVE-2021-23017-PoC python3 poc.py --target 172.1.16.100 --dnsserver 172.1.16.1 This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intended to be used to attack systems except where...

admin-panel-finder

admin-panel-finder 一个用于查找网站管理面板的Python脚本...

domains-from-csp

domains-from-csp A Python script to parse domain names from CSP header A script to extract domain names from Content Security PolicyCSP headers The output is print to stdout for now Demo Screenshots 3rd party package dependency requests click Setup Clone this repo $ git clone...

assets-from-spf

assets-from-spf A Python script to parse netblocks & domain names from SPFSender Policy Framework DNS record For every parsed asset, the script will also find and print Autonomous System NumberASN details For now, the output is printed in JSON format only Demo Screenshots 3rd party package...

WP-CVE-2025-4322---Scan

Usage Normal Test python3 wp-backdoor-remote-scan.py https://misitio.com with JSON output python3 wp-backdoor-remote-scan.py https://misitio.com --json Adjust threads and timeout for rate-limited sites python3 wp-backdoor-remote-scan.py https://misitio.com --threads 5 --timeout 15...

CVE-2019-19781

CVE-2019-19781 Batch Proof of Concept Use Usage Limitations 1. Before use, the folder must contain a "data.txt" file with content: 192.168.1.0/24\n 192.168.2.0/24\n 2. Execute only on Linux: python3 CVE-2019-19781-testbata.py 3. If successfully executed and a vulnerability is found, export to...

rqu1-cve-2021-3060.py

This repository does not have a README...

CVE-2024-9441-Checker

CVE-2024-9441-Checker A simple python script to test for CVE-2024-9441...

CVE-2025-53770-scanner

CVE-2025-53770 Python script to check for CVE-2025-53770...

Home-Demolisher

Home-Demolisher CVE-2021-31166 および CVE-2022-21907 の PoC 使用方法: usage: CVE-2021-31166.py -h -u URL -l LIST -o OUTPUT Description message options: -h, --help show this help message and exit -u URL, --url URL IIS Server url. For instance: 192.168.1.110 -l LIST, --list LIST IIS Server urls list. For...