iDictPy

iDictPy A salty-ass 100% verified hacker status python script to turn apple id's into apple crisp nicememe I initially made this as a better alternative to this piece of shit: https://github.com/Pr0x13/iDict/ but then i forgot i'm a little bit drunk and then this happened. prerequisites are...

CVE-2012-2982

CVE-2012-2982 Python POC for CVE-2012-2982 Webmin 1.580 improved from the original by user OstojaOfficial This is an improved version of the original script that allows the user to see the input data format without needing to view the entire script to discover it. To achieve this, that section of...

CVE-2023-1545

CVE-2023-1545 Simple SQL Injection Python script for Teampass prior to versions 3.0.0.23, leveraging CVE-2023-1545. More information on this blog. Usage Just use set the URL where Teampass is running as unique argument: python3 CVE-2023-1545.py http://example.com:8080 Discliamer Use it for ethica...

CVE-2023-20198

CVE-2023-20198 CVE-2023-20198 PoC ! Description perform actions on a target web server. The script demonstrates how to create a local user account, install an implant, restart the web server, check for the presence of the implant, and finally, clean up by deleting the created user account...

SearchOrg

SearchOrg By entering a company's email domain, information is obtained using DNS, NMAP and Shodan Keep in mind NMAP must be installed on the machine to use the command You must have a Shodan account and load the APIKey where the script indicates Configure the required libraries listed in the...

CertCrunchy

/ \ | | / \ | | | / / | || / / | | | | / \ '| | | | '| | | | ' \ / | ' | | | | | /\ / | | || /\ | | || | | | | | | | | || | /|| |/| ,|| |||| ||, | / | |/ Just a silly recon tool that uses data from SSL Certificates to find potential hostnames What the? It just a silly python script that...

Airopy

Airopy - Wireless Packet Capture Get clients and access points. With Alfa cards this script works correctly. Dependencies To run this script first install requirements as follows: sudo pip3 install -r requirements.txt How to use In the examples I don't add 'sudo', but to execute them you need hig...

fb-phisher-python

Facebook Phishing Original Author : Arslan Mughal BY : arjunindia original repository : https://github.com/arslanmughal5566/facebookphishing About Script : With this script you can perform Facebook login credentials stealing with some social engineering skills. requirements : 1 : Python3.x 2 :...

shellshock-cgi

shellshock-cgi A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server Usage $ python testing.py --server 172.16.255.130 --listen 172.16.255.1 Example Return: + Testing if 172.16.255.130 is vulnerable to CVE-2014-6271 via CGI + Listening for incoming connection...

N4xD0rk

N4xD0rk Listing subdomains about a main domain using the technique called Hacking with search engines. Instalation You can download the latest version of N4xD0rk by cloning the GitHub repository: git clone https://github.com/n4xh4ck5/N4xD0rk.git Install the dependencies via pip: pip install -r...

diskwalker

Diskwalker a simple script to walk your disk and keep track of interesting sets of files After gaining access to a remote machine during penetration testing, you might want to find interesting configuration files or binaries to attempt a privilege escalation. The script is self contained, and wor...

plugxdecoder

plugxdecoder Basic Python script which Decodes PlugX traffic and encrypted/compressed artifacts. Accepting pull requests from those who wish to contribute. Currently requires: CTypes with ntdll, dpkt http://code.google.com/p/dpkt Tested with Python 2.7, on Windows. Long-term goal is to make a pur...

url-status-checker

Status Checker URL Status Checker v2.1 Status Checker is a Python script that checks the status of one or multiple URLs/domains and categorizes them based on their HTTP status codes. Version 2.1.0 Features Check the status of single or multiple URLs/domains. Asynchronous HTTP requests for improve...

HackerInfo

HackerInfo install : sudo apt install python3 python3-pip pip3 install termcolor pip3 install google pip3 install optioncomplete pip3 install bs4 pip3 install prettytable git clone https://github.com/Matrix07ksa/HackerInfo/ cd HackerInfo chmod +x HackerInfo ./HackerInfo -h python3 HackerInfo.py -...

awsEnum

awsEnum Enumrate AWS services! with no nosies awsEnum is a python script enumrate AWS services through the provided credential. :book: Table of Contents Table of Contents 1. Screenshot 2. Disclaimer 3. Features 4. Prerequisites 5. How to Install 6. Results and FQAs 7. To-Do :clapper: Screenshot...

CVE-2024-30043-XXE

CVE-2024-30043-XXE Credit The impact of the vulnerability is limited at present, but thanks to https://x.com/chudyPB for providing a clever bypass idea. https://x.com/chudyPB...

stackflow

stackflow Universal stack-based buffer overfow exploitation tool Usage usage: ./stackflow.py OPTIONS optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST rhost -p RPORT, --rport RPORT rport -c CMDS, --cmds CMDS commands to send to server before overflow -v VULNCM...

CVE-2024-9441-Checker

CVE-2024-9441-Checker A simple python script to test for CVE-2024-9441...

Home-Demolisher

Home-Demolisher PoC for CVE-2021-31166 and CVE-2022-21907 Usage: usage: CVE-2021-31166.py -h -u URL -l LIST -o OUTPUT Description message options: -h, --help show this help message and exit -u URL, --url URL IIS Server url. For instance: 192.168.1.110 -l LIST, --list LIST IIS Server urls list. Fo...

CVE-2024-6387_Check

This script checks if servers are running a vulnerable version of OpenSSH based on specified targets. It uses threading for concurrent scanning of multiple targets and ports. Installation: git clone https://github.com/sardine-web/CVE-2024-6387Check.git cd CVE-2024-6387Check Usage To check if...