s3-bucket-take-0v3r

s3-bucket-take-0v3r S3 Bucket Takeover Scanner & Claim Tool 📌 Description S3 Bucket Takeover Scanner & Claim Tool is a Python 2.7-based utility that: 1. Scans domain names to identify potential Amazon S3 bucket takeover vulnerabilities. 2. Automatically claims unregistered S3 buckets and uploads ...

fuel-cms-cve-2018-16763-python3-port

FUEL CMS 1.4.1 Python 3 Compatibility Port Overview This repository contains a Python 3 compatibility port of the original proof-of-concept for CVE-2018-16763 affecting FUEL CMS 1.4.1. The original proof-of-concept was written by 0xd0ff9. This repository does not claim authorship of the original...

grafana-bruteforce

grafana-bruteforce A tool that takes a combo username and password list and will attempt to bruteforce grafana login page. Grafana will lock you out after 5 attempts so you need to ensure your proxy has multiple external ip's. How to Run Use supplied combo list python3 grafana-brute.py -u...

bucket-brute

bucket-brute Aws S3 Tko Tool usage: bucket-brute.py -h -u URL -p PROXY -b BUCKET optional arguments: -h, --help show this help message and exit -u URL, --url URL No Such Bucket URL -p PROXY, --proxy PROXY Proxy for debugging -b BUCKET, --bucket BUCKET Bucket Name Example Creating mytest in region...

CVE-2026-50522

CVE-2026-50522 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python...

check-cve-2019-19781

check-cve-2019-19781 🔎🐞 This utility determines if a host appears susceptible to CVE-2019-19781. Requirements Python versions 3.6 and above. Note that Python 2 is not supported. Installation From a release: pip install...

Homework-of-Python

Homework-of-Python Python codes of my blog. pptppasswordhack.py Use Brute-force attack to get the password of PPTP VPN. It'll read the passwords in filenamed wordlist and then use pptpsetup to connect to the server. The time interval is 10 seconds. portscan.py Use to scan port. The timeout is 3...

Exploit_Development

Proof-of-Concepts for my CVEs CVE-2022-3436 - Online Student Clearance System v1.0 - CVE-2022-3436.py...

CVE-2020-1472

CVE-2020-1472 Packaged py files used in reproducing CVE-2020-1472 The examples path contains the directory where the exp files are located; the rest are import packages, just ignore them Corresponding blog post: https://www.svenbeast.com/post/fu-xian-cve-2020-1472-netlogon-te-quan-ti-sheng-lou-do...

AuraBorealisApp

AuraBorealis: Do You Know What's In Your Python Packages? About AuraBorealis is a web application for visualizing anomalous and potentially malicious code in Python package registries. It uses security audit data produced by scanning the Python Package Index PyPI via Aura, a static analysis...

domained

domained archived A domain name enumeration tool This project is no longer maintained. Thank you to @ccsplit and @mzfr for their work on domained. Gist: Some terrible continually updated python code leveraging some awesome tools that I use for bug bounty reconnaissance. The tools contained in...

FDsploit

A File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool. FDsploit menu: $ python fdsploit.py -h | | \ | ||| | | | | | -| . | | . | | | || |/|| ||||| ||...ver. 1.2 Author: Christoforos Petrou game0ver ! usage: fdsploit.py -u | -f -h -p -d -e 0,1,2 -t -b -x -c -v --params...

Kcfinder-Mass-Scanner

Kcfinder-Mass-Scanner Python 2.7 How To Use? Install Python 2.7 Download Here python file.py...

CVE-2022-22947_exp

CVE-2022-22947-exp CVE-2022-22947 Exploit script Use python3 CVE-2022-22947.py Example: python3 CVE-2022-22947.py http://127.0.0.1:8080 "cat /etc/passwd"...

Pentest-Tools-Framework

Pentest Tools Framework exploits, Scanner, Password. Details | | ---|---|--- NEWS Modules PTF UPDATE! PTF OPtions ------------------------------------------------------------------------------------- | Global Option |...

msfrpc

NOTE: This tool is no longer under active maintenance. ===================== Metasploit MSGRPC Modules Ryan Linn [email protected] http://www.trustwave.com Modules for communicating with Metasploit MSGRPC Introduction This repository contains two modules for communicating with Metasploit's...

HRShell

HRShell: An advanced HTTPS Reverse Shell built with Flask HRShell is an HTTPS/HTTP reverse shell built with flask and is compatible with python 3.x. The client.py has been successfully tested on: Linux ubuntu 18.04 LTS, Kali Linux 2019.3 macOS Mojave/Catalina Windows 7/10 while the server.py is...

pyattck

Bienvenido a la documentación de pyattck . ... | \ \ \ / / / \ | | | / || |/ / | | | \ / / / ^ \ ---| |-------| |----| ,----'| ' / | / \ / / /\ \ | | | | | | | La versión actual es 7.1.1 pyattck es un framework ligero para los marcos MITRE ATT&CK. Este paquete extrae detalles de los marcos...

pyattck

Welcome to pyattck's Documentation . ... | \ \ \ / / / \ | | | / || |/ / | | | \ / / / ^ \ ---| |-------| |----| ,----'| ' / | / \ / / /\ \ | | | | | | | Current Version is 7.1.1 pyattck is a light-weight framework for MITRE ATT&CK Frameworks. This package extracts details from the MITRE...

Obfuscapk

!IMPORTANT This project is archived and no longer maintained. Some of the most common questions are answered in FAQ and troubleshooting. A black-box obfuscation tool for Android apps. Obfuscapk is a modular Python tool for obfuscating Android apps without needing their source code, since apktool ...