FuegoTest

FuegoTest FuegoTest is a Command Line Interface CLI tool designed to detect devices potentially vulnerable to CVE-2023-20048 in Cisco Firepower Management Center FMC. Utilizing the rich library, FuegoTest provides an enhanced user experience with progress bars and styled text for terminal output...

WerkGhost

WerkGhost Exploit for Werkzeug -p -d --timeout -t Example python werkghost.py -u http://127.0.0.1:8000 -p CON -d download --timeout 3 -t 100 Note : The target web server must be running on Windows. If the operation fails or produces inconsistent results, increase the number of worker threads and...

cve-2020-14882

cve-2020-14882 usage: cve-2020-14882.py http://127.0.0.1...

CVE-2018-4879

git clone https://github.com/Sch01ar/CVE-2018-4878.git cd CVE-2018-4878/ python cve-2018-4878.py...

CVE-2022-0847-dirty-pipe-kernel-checker

CVE-2022-0847-dirty-pipe-kernel-checker Python script to check if your kernel is vulnerable to Dirty pipe CVE-2022-0847 You can execute directly the script on your system and it will find your kernel version But you can execute the script with as argument a kernel version to check 3 digit kernel...

SecuraBV-CVE-2020-1472

ZeroLogon testing script A Python script that uses the Impacket library to test vulnerability for the Zerologon exploit CVE-2020-1472. It attempts to perform the Netlogon authentication bypass. The script will immediately terminate when succesfully performing the bypass, and not perform any...

CVE-2018-9995_check

CVE-2018-9995check Batch detection of DVR series cameras Usage: python CVE-2018-9995.py host.txt The content of host.txt can be 8.8.8.8:8080 or www.baidu.com. After the script runs, hosts using DVR series cameras will be saved to result.txt. Vulnerability exploitation tool available at:...

CVE-2025-31125

CVE-2025-31125 Vulnerability Detection Tool This is a Python script tool for detecting CVE-2025-31125 vulnerability. Author Information Author: 大智 Date: 2025-04-01 Features Supports single target detection Supports batch target detection Automatically saves detection results Colored output...

CVE-2020-10148-Solarwinds-Orion

CVE-2020-10148 Solarwinds Orion Download CVE-2020-10148.py wget https://gist.githubusercontent.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965/raw/0d7db4f2ea5aacc0ada7b1a7b23f2ce8ba39315f/CVE-2020-10148.py Looking Solarwinds Orion from Shodan...

AgentTesla-Config-Extractor

AgentTesla-Config-Extractor Config extractor for AgentTesla - Discord/Telegram Variant Usage agenttesla-config-extractor.py -f Example Output Example Hashes 0de25252f312735c0a26f7ac7a27cc8a51bfcdd900fc2e8d0a8b65013988e7e9 118a34bf096f5b9ea16c31de288793192ed4bc413ee8f50198eb7df7f5cf8f0e...

POC-CVE-2026-19295

Description Proof of concept exploit code for CVE-2026-19295 Usage python3 poc.py -url -uname -pword -c...

ghidra_stack_strings

Ghidra Stack-strings A script to detect stack-strings written by the selected x86/x64 instructions, emulated using Unicorn. The script is written in Python 3, so it needs Ghidrathon...

msiscan

MSI Analyzer This Python script for Linux can analyze Microsoft Windows .msi Installer files and point out potential vulnerabilites. It was developed by Michael Baer @derbaer0 in the SEC Consult Vulnerability Lab. Currently, it is mostly suited for a local privilege escalation also described in o...

grafana-bruteforce

grafana-bruteforce A tool that takes a combo username and password list and will attempt to bruteforce grafana login page. Grafana will lock you out after 5 attempts so you need to ensure your proxy has multiple external ip's. How to Run Use supplied combo list python3 grafana-brute.py -u...

bucket-brute

bucket-brute Aws S3 Tko Tool usage: bucket-brute.py -h -u URL -p PROXY -b BUCKET optional arguments: -h, --help show this help message and exit -u URL, --url URL No Such Bucket URL -p PROXY, --proxy PROXY Proxy for debugging -b BUCKET, --bucket BUCKET Bucket Name Example Creating mytest in region...

CVE-2022-22947_exp

CVE-2022-22947-exp CVE-2022-22947 Exploit script Use python3 CVE-2022-22947.py Example: python3 CVE-2022-22947.py http://127.0.0.1:8080 "cat /etc/passwd"...

smtp_userenum

smtpuserenum Help: python3 smtpuserenum.py -h Usage: python3 smtpuserenum.py You can change the username list:...

CVE-2023-26209

CVE-2023-26209 Exploit Automation For Educational Purposes 🚨 📌 Description This is a Python script with a graphical interface Tkinter that allows the user to test automated request submissions to a login endpoint. The goal is to simulate how servers respond to different payload sizes and analyze...

firebase

firebase Exploiting vulnerable/misconfigured Firebase databases Disclaimer: The provided software is meant for educational purposes only. Use this at your own discretion, the creator cannot be held responsible for any damages caused. Please, use responsibly! Prerequisites Non-standard python...

sshLooter

DON'T USE THIS There's a C version which is much better sshLooterC sshLooter Script to steal passwords from ssh. Install git clone https://github.com/mthbernardes/sshLooter.git cd sshLooter Configuration Edit the script on install.sh, and add your telegram bot api, and your userid. Call the...