cve-2017-8917

step 1 - download all the files, and has python3 step 2 - install dependency pip install -r requirements.txt step 2.1 - if the dependencies failed to install, might be some Linux restriction, try to use virtual env python3 -m venv venv source ./venv/bin/activate pip install -r requirements.txt st...

CVE-2018-9995_check

CVE-2018-9995check Batch detection of DVR series cameras Usage: python CVE-2018-9995.py host.txt The content of host.txt can be 8.8.8.8:8080 or www.baidu.com. After the script runs, hosts using DVR series cameras will be saved to result.txt. Vulnerability exploitation tool available at:...

crucible

██████╗██████╗ ██╗ ██╗ ██████╗██╗██████╗ ██╗ ███████╗ ██╔════╝██╔══██╗██║ ██║██╔════╝██║██╔══██╗██║ ██╔════╝ ██║ ██████╔╝██║ ██║██║ ██║██████╔╝██║ █████╗ ██║ ██╔══██╗██║ ██║██║ ██║██╔══██╗██║ ██╔══╝ ╚██████╗██║ ██║╚██████╔╝╚██████╗██║██████╔╝███████╗███████╗ ╚═════╝╚═╝ ╚═╝ ╚═════╝ ╚═════╝╚═╝╚════...

CVE-2019-18634

SUDO VULNERABILITY CVE-2019-18634 Exploit developed in Python for Sudo vulnerability BSS overflow CVE-2019-18634. For studying reasons USE python run.py Credits https://github.com/Plazmaz/CVE-2019-18634 https://bestwing.me/CVE-2019-18634-analysis.html...

CVE-2024-34102

CVE-2024-34102 Usage python3 CVE-2024-34102.py -h optional arguments: -h, --help show this help message and exit -u URL, --url URL Target URL -ip IP, --ip IP Your IP address -p PORT, --port PORT Port for HTTP server -f FILE, --file FILE Path to the file to be included in the POC...

CVE-2020-27838

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2020-27838 Run bellow command to check CVE-2020-27838 -h Configurations 2. We integrated with the Telegram API to receive...

ROCA-attack-on-vulnerability-CVE-2017-15361

ROCA-attack-on-vulnerability-CVE-2017-15361 This repository contains the thesis developed for my bachelor's degree in Mathematical Engineering at Polytechnic of Turin. It's a script based on python and sage. The goal of the script is to generate an RSA key, evaluete if it's vulnerable by the ROCA...

Check-Point_poc

Check-Pointpoc Check-Point Security Gateway Arbitrary File Read Vulnerability CVE-2024-24919 python Check-Pointpoc.py -h -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--'...

CVE-2022-33891

CVE-2022-33891 Apache Spark Vulnerability Exploit . Created By : Dr.Linux This Exploit Run With Python Version 3.7 and Newer Version Of Python...

gasmask

gasmask All in one Information gathering tool - OSINT For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: maldevel twitter mikismaos xvass ndamoulianos sbrb Dependencies Python 3.x validators python-whois dnspython requests shodan censys mmap pprint...

CVE-2025-24893-EXP

CVE-2025-24893-EXP Affected Versions xwiki-platform = 5.3-milestone-2, = 16.0.0-rc-1, 16.4.1 16.0.0-rc-1, 16.4.1 POC https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24893.yaml CVE-2025-24893 - XWiki Platform Exploit usage: python CVE-2025-24893.py -u -c...

CVE-2024-48990

CVE-2024-48990 Exploit Local Privilege Escalation in needrestart 3.8 via PYTHONPATH injection. How It Works 1. needrestart runs as root and scans all processes 2. Finds our Python process, reads PYTHONPATH=/tmp/.m from /proc/pid/environ 3. Executes Python as root with our malicious PYTHONPATH 4...

evillimiter

Evil Limiter This project is a maintained fork of bitbrute/evillimiter. The upstream repository is no longer maintained, so this fork continues development - bug fixes, new features, and compatibility updates. See Fork-specific changes below. A tool to monitor, analyze and limit the bandwidth...

spraycharles

Spraycharles hey, yo I'm feeling like spraycharles - Chiddy Bang Low and slow password spraying tool, designed to spray on an interval over a long period of time. Includes spraying plugins for Office365, OWA, EWS, Okta, ADFS, Cisco SSL VPN, Citrix Netscaler, Sonciwall, NTLM over HTTP, and SMB...

jwt_tool

The JSON Web Token Toolkit v2 jwttool.py is a toolkit for validating, forging, scanning and tampering JWTs JSON Web Tokens. Its functionality includes: Checking the validity of a token Testing for known exploits: CVE-2015-2951 The alg=none signature-bypass vulnerability CVE-2016-10555 The RS/HS25...

CVE-2022-22947_exp

CVE-2022-22947-exp CVE-2022-22947 Exploit script Use python3 CVE-2022-22947.py Example: python3 CVE-2022-22947.py http://127.0.0.1:8080 "cat /etc/passwd"...

hacks

Hacks Hacky one-off scripts, tests etc...

dns-zone-transfer-test

DNS Zone Transfer Test Automates Domain Name System DNS zone transfer testing. Automatically finds a given domains nameservers, and tests for zone transfers, if successfully, identified A records are printed to standard output. Usage dztt zonetransfer.me dztt -f domains.txt dztt -n 1.1.1.1...

CanoP

CanoP CLI A fast, standalone static analysis tool for finding security risks in AI-generated code. CanoP runs locally and produces actionable findings with remediation guidance. See CanoP in Action Features High signal-to-noise : Targets AI-era risks such as SQL injection, unsafe reflection, and...

gpp-encrypt

gpp-encrypt Description This little script encrypts password to gpp cpassword. It useful to create vulnerable lab AD. Requirements This package require: python3 python3 Standard Library Installation git clone "https://github.com/mauricelambert/gpp-encrypt.git" cd "gpp-encrypt" python3 -m pip...