stumpy

|Versión de PyPI| |Versión de Conda Forge| |Descargas de PyPI| |Licencia| |Estado de las pruebas| |Cobertura de código| |Estado de RTD| |Binder| |JOSS| |NumFOCUS| .. |Versión de PyPI| image:: https://img.shields.io/pypi/v/stumpy.svg :target: https://pypi.org/project/stumpy/ :alt: PyPI Version...

CVE-2007-4559

PoC or Exploit for CVE-2007-4559 A malicious TAR archive can include file paths like ../../../../etc/passwd, which try to "climb up" out of the intended extraction folder. If a Python script uses tarfile.extract or extractall without checking the file paths, it will unpack files to those location...

awesome-web-security

Awesome Web Security - ZH 🐶 Curated list of Web Security materials and resources. Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage ...

cve-2014-0050

cve-2014-0050 Sitio web vulnerable a CVE-2014-0050 Este proyecto tiene como objetivo demostrar la explotación de CVE-2014-0050 con fines educativos. Para más información, consulte: https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2014-0050--Exploit-with-Boundaries,-Loops-without-Boundaries...

log4j-filescan

████████████████▀███████████████████████████████████████████████████████████████████ █▄─▄███─▄▄─█─▄▄▄▄█░█░████▄─▄█▀▀▀▀▀██▄─▄▄─█▄─▄█▄─▄███▄─▄▄─█─▄▄▄▄█─▄▄▄─██▀▄─██▄─▀█▄─▄█ ██─██▀█─██─█─██▄─█▄▄░██─▄█─██████████─▄████─███─██▀██─▄█▀█▄▄▄▄─█─███▀██─▀─███─█▄▀─██...

-CVE-2017-9805-

Información de vulnerabilidad Recursos: https://vulners.com/cve/CVE-2017-9805 ¿Qué es esto? Un script de exploit en Python capaz de ejecutar comandos remotos en el shell de un sistema que aloja un Struts2 vulnerable a S2-052. Uso python s2-052.py --target 'http://192.168.0.233/orders/3' --command...

sec-af

SEC-AF AI-Native Security Auditor Built on AgentField Output • Benchmark • How It Works • Comparison • Quick Start • API Other tools flag patterns. SEC-AF proves exploitability : every finding ships with a verdict, a data flow trace, and evidence you can act on. Free, open source, one API call. A...

GroupPolicyBackdoor

GroupPolicyBackdoor GroupPolicyBackdoor es una utilidad de Python para la manipulación y explotación de objetos de directiva de grupo GPO. Los vectores de ataque de GPO pueden conducir con mucha frecuencia a escenarios impactantes de escalada de privilegios en entornos de Active Directory. Y sin...

fses

fses 搜索引擎爬虫 - 用于从搜索引擎抓取 URL 的 Python 库 我们抓取的搜索引擎 Ask Bing DuckDuckGO UOL Yahoo 安装 git clone https://github.com/mthbernardes/fses.git cd fses pip install -r requeriments.txt 用法 使用 Ask 进行简单搜索 from searchEngines.ask import ask print "Ask Search" query = "site:domain.com" 设置一个 dork a = ask 创建任意搜索引擎的实...

fses

fses Fucking Search Engines Scraper - python library to scrap url's from search engines Search Engines we scrap Ask Bing DuckDuck GO UOL Yahoo Install git clone https://github.com/mthbernardes/fses.git cd fses pip install -r requeriments.txt Usage Simple search using Ask from searchEngines.ask...

tesseract

Unit Testing for Tesseract Requirements Files and structure ├── langdatalstm │ ├── common.punc │ ├── common.unicharambigs │ ├── desiredbigrams.txt │ ├── eng │ │ ├── desiredcharacters │ │ ├── eng.config │ │ ├── eng.numbers │ │ ├── eng.punc │ │ ├── eng.singlestext │ │ ...

CVE-2021-21402-Jellyfin

CVE-2021-21402-Jellyfin-任意文件读取 此POC仅用于学习交流，由此产生的一切后果本人不承担 python POC.py targets.txt...

CVE-2025-24752-POC

CVE-2025-24752-POC Introduction This python application checks whether a site is vulnerable to CVE-2025-24752. Install Clone this repo and run: pip3 install -r requirements.txt Usage python3 cve-2025-24752.py --url http://example.com or python3 cve-2025-24752.py --urls-file urls.txt...

pentest-ai

Website · Quick start · Bug bounty · Verification · Documentation · Issues Pentest-AI is an open-source AI penetration testing and bug-bounty tool that proves every finding. It connects an AI client or model to a real pentest workflow — investigating web applications, discovering and reproducing...

CVE-2024-23897

用法 python3 exp.py...

MalScan

MalScan MalScan is a simple PE File Heuristics Scanners written in python that you can use to quickly analyze a PE file and find out whether anything suspicious exists. It is a simple tool so doesn't offers much fancy features. You are free to extend it or do whatever you want with it. Things...

uefi-firmware-parser

UEFI Firmware Parser .. image:: https://travis-ci.org/theopolis/uefi-firmware-parser.svg?branch=master :target: https://travis-ci.org/theopolis/uefi-firmware-parser The UEFI firmware parser is a simple module and set of scripts for parsing, extracting, and recreating UEFI firmware volumes. This...

uefi-firmware-parser

UEFI 固件解析器 .. image:: https://travis-ci.org/theopolis/uefi-firmware-parser.svg?branch=master :target: https://travis-ci.org/theopolis/uefi-firmware-parser UEFI 固件解析器是一个用于解析、提取和重新创建 UEFI 固件卷的简单模块和脚本集。 该模块还包括对 BIOS、OptionROM、Intel ME 等其他格式的解析。 请参考示例脚本了解解析教程。 安装 该模块可通过 PyPi 获得，名称为 uefifirmware :: $...

StegoForge

🛡️ StegoForge The ultimate hybrid of steganography, digital forensics, and covert communications. ⚡ Quick Launch Standalone Binaries StegoForge is a complex Python framework, but you shouldn't have to deal with broken environments when doing active forensics. We have compiled zero-dependency,...

wp_hunter

wphunter Static analysis to search for vulnerabilities in Wordpress plugins. / \ / \ / | \ / | \ // /| / \ | / \ / \ \ \ / | | \ Y / | / | \ | \ /| | / /\ / ||| /|/|| /| \ | / // / / / | Author: @JosueEncinar Starting the process Total plugins 87509 Starting the analisys How to add a...