CGIShell

CGIShell shellshock CVE-2014-6271 CGI Exploit Use like OpenSSH via CGI Page Use python cgishell.py 'http://www.google.com/cve-2014-6271/poc.cgi' Screenshot Dependence Windows needed pyreadline It is not needed chardet Future Add TestCase HTTP Login Support http transmission gzip compression chard...

CVE-2024-0195

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-0195 Run bellow command to check CVE-2024-0195 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2015-1635

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2015-1635 Run bellow command to check CVE-2015-1635 -h Configurations 2. We integrated with the Telegram API to receive...

CVE-2019-10945

Code Conversion to Python 3 This code is taken from Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Joomla". The original code...

stackflow

stackflow Universal stack-based buffer overfow exploitation tool Usage usage: ./stackflow.py OPTIONS optional arguments: -h, --help show this help message and exit -r RHOST, --rhost RHOST rhost -p RPORT, --rport RPORT rport -c CMDS, --cmds CMDS commands to send to server before overflow -v VULNCM...

BRIntelcollector

BRIntelcollector Overview The BRIntelcollector is a Cyber Threat Intelligence CTI tool focused on Brazilian national threat indicators. The tool allows searching and consolidating information about cyber threats through multiple intelligence sources, facilitating the creation of a centralized...

GitDump

GitDump GitDump dumps the source code from .git when the directory traversal is disabled Requirements Python3 Tested on Windows Kali Linux What it does Dump source code from website/.git directory when directory traversal is disabled. How it works Fetch all common files .git/index, .git/HEAD,...

CVE-2018-7600

CVE-2018-7600 python3 exploit.py...

C2

C2 via python generated favicon, read with powershell...

CVE-2025-53770-scanner

CVE-2025-53770 Python script to check for CVE-2025-53770...

telerik-scanner-cve-2017-9248

Telerik CVE-2017-9248 Vulnerability Scanner V2.0 A comprehensive Python scanner that discovers Telerik endpoints and tests for CVE-2017-9248 cryptographic vulnerability with enterprise-grade bulk scanning capabilities. Features Quick & Discovery Modes: Single path testing or comprehensive discove...

MSFinger

MSFinger - Microsoft Network Service Fingerprinting Tool Version: 1.0 Author: Laurent Gaffie Company: Secorizon Overview MSFinger is a high-performance network fingerprinting tool designed for internal network reconnaissance. It rapidly identifies Microsoft services, detects security...

CVE-2023-26256

CVE-2023-26255 CVE-2023-26256 POC Usage: python3 CVE-2023-26256.py -h...

Cacti-CVE-2020-8813

Cacti-CVE-2020-8813 Usage: cactirce.py options Options: -h, --help show this help message and exit -u URL, --url=URL Required target URL eg:. http://Cacti/ -l LHOST, --lhost=LHOST Required Attacker IP addr -p LPORT, --lport=LPORT Default 443 Attacker IP Port Example: python3 cactirce.py -u...

CVE-2024-28397-exploit

js2py Sandbox Escape CVE-2024-28397 Exploit for remote command execution RCE via sandbox escape in js2py = 0.74. Allows arbitrary code execution on the host system through insecure JavaScript evaluation. Vulnerability CVE : CVE-2024-28397 Component : js2py Affected versions : = 0.74 Impact : Remo...

ProxyShell_POC

ProxyShellPOC POC for scanning ProxyShellCVE-2021-34523,CVE-2021-34473,CVE-2021-31207 usage: python3 Proxyshell.py ip...

CVE-2024-6387_Check

This script checks if servers are running a vulnerable version of OpenSSH based on specified targets. It uses threading for concurrent scanning of multiple targets and ports. Installation: git clone https://github.com/sardine-web/CVE-2024-6387Check.git cd CVE-2024-6387Check Usage To check if...

CVE-2025-55182_RCE_Exploit

CVE-2025-55182RCEExploit REC Exploit is a Python-based security testing tool that automates detection of potential RCE conditions in web applications under authorized environments. It sends crafted POST requests to targets, analyzes server responses for execution indicators, and supports batch...

CVE-2022-21371

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2022-21371 Run bellow command to check CVE-2022-21371 -h Configurations 2. We integrated with the Telegram API to receive...

BADministration

BADministration What is BADministration? BADministration is a tool which interfaces with management or administration applications from an offensive standpoint. It attempts to provide offsec personnel a tool with the ability to identify and leverage these non-technical vulnerabilities. As always:...