crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

CVE-2025-47273-POC

setuptools Path Traversal CVE-2025-47273 📖 Overview Proof-of-concept exploit for a path traversal vulnerability in Python setuptools pythonserver.py 'EOF' import http.server import socketserver class Handlerhttp.server.SimpleHTTPRequestHandler:...

atomicvulns

⚠️ Intentionally vulnerable. Run locally only. Never expose to the internet or a shared network. Read this in other languages: Português Brasil What is atomicvulns? Milestone — v1.0: the web series now covers all ten OWASP Top 10 2021 categories A01–A10 , across 38 atoms. See the v1.0 release...

CVE-2012-1823-exploit-for-https-user-password-web

CVE-2012-1823 file is exploit use : python3 CVE-2012-1823.py CVE-2012-1823,CVE-2021-2291.py file find out if the site is vulnurable for CVE-2012-1823 or CVE-2021-2291 use : python3 CVE-2012-1823,CVE-2021-2291.py command whoami cd ls tested on kali linux...

linux-security-audit

Linux Security Audit Tool Linux Security Audit Tool based on the CIS - Red Hat Enterprise Linux 8 Benchmark v3.0.0 If you find this helpful, please the "star" 🌟 to support further improvements. Table of Contents 1. Features 2. Preview 3. Result-Log 4. Supported OS 5. Prerequisites 6. Notes...

POC-CVE-2023-32681

POC for CVE-2023-32681 This is a Python 3 implementation of CVE-2023-32681, affecting clients using the requests version = 2.30.0. As per https://www.rfc-editor.org/rfc/rfc9110.htmlsection-15.4 whenever redirection 3xx is issued by the server then user-agent should modify the request to remove...

pyc2

pyc2 simple c2 written in python2 to demonstrate security concepts. use icmp echo requests and replies to trade base64 encoded commands and replies. Video explaining some of the security concepts and implementation decisions: https://www.youtube.com/watch?v=DHrEn7oK9vQ requires scapy pip install...

Qu1cksc0pe

Qu1cksc0pe All-in-One malware analysis tool for analyze many file types, from Windows binaries to E-Mail files. You can get : What DLL files are used. Functions and APIs. Sections and segments. URLs, IP addresses and emails. Android permissions Dangerous/Special/Info. MITRE ATT&CK mappings Window...

analyzeMFT

AnalyzeMFT Status : All tests passing across Python 3.8-3.12 on Windows, macOS, and Linux. Quick Start Install pip install analyzeMFT Basic usage python analyzeMFT.py -f MFTFILE -o output.csv --csv Generate test MFT for testing python -c "from src.analyzeMFT.testgenerator import createtestmft;...

RTA

Red Team Automation RTA RTA provides a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK. RTA is composed of python scripts that generate evidence of over 50 different ATT&CK tactics, as well as a compil...

spyse.py

spyse.py Python API wrapper and command-line client for the tools hosted on spyse.com. "Spyse is a developer of complete DAAS Data-As-A-Service solutions for Internet security professionals, corporate and remote system administrators, SSL / TLS encryption certificate providers, data centers and...

pyrasp

What is PyRASP ? PyRASP is a Runtime Application Self Protection package for Python-based Web Servers Flask, FastAPI and Django and Serverless Functions AWS Lambda, Azure and Google Cloud Functions. It protects against the main attacks web applications are exposed to, from within the application...

CVE-2026-33017

CVE-2026-33017 — Langflow Unauthenticated Remote Code Execution Author: dynamo2k1 Severity: Critical CVSSv3: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Overview CVE-2026-33017 is a critical unauthenticated Remote Code Execution vulnerability in Langflow, an open-source platform for visually building...

CVE-2026-33017-langflow-rce

CVE-2026-33017 - Langflow Unauthenticated Remote Code Execution RCE Overview CVE ID: CVE-2026-33017 Affected Software: Langflow Vulnerable Versions: = 1.9.0 Severity: Critical Author: arensballiu Date: 2026 Description Langflow exposes a public flow build endpoint /api/v1/buildpublictmp/flowID/fl...

MemITM

What's the MemITM tool? The MemITM Mem In The Middle tool has been developped in order to easily intercept "messages" in Windows processes memory. We developped a lot of custom memory interception tools in order to capture network messages before encryption, or IPC messages, and to be able to...

CVE-2024-9933

CVE-2024-9933 Usage Usage: python CVE-2024-9933 .py option URL Options: check : Verify if the target URL is vulnerable. exploit : Attempt to exploit the vulnerability on the provided URL. Examples: python CVE-2024-9933 .py check http://example.com python CVE-2024-9933 .py exploit http://example.c...

CVE-2025-14847-PoC

CVE-2025-14847 Proof of Concept Academic & Defensive Research Notice This repository contains a proof-of-concept PoC developed strictly for academic analysis, defensive research, and vulnerability validation purposes. The objective of this project is to help security researchers, defenders, and...

MOSAIC

MOSAIC Multi-Platform Observational & Sociodynamic Analysis of Individual Configurations This repository is a proof of concept. MOSAIC is a sociological framework for multi-platform behavioral analysis, built in papers before it was built in code. What you find here is its first test bench: the...

thm_steelmountain_CVE-2014-6287

thmsteelmountainCVE-2014-6287 a python3 version of the exploit written for CVE-2014-6287. Useful for completing the "Steel Mountain" room on TryHackMe.com without the use of metasploit...

Silent_CVE_2019_16394

CVE-2019-16394 A simple POC python script of CVE-2019-16394 Script is adjusted for a french website, you may need to modify it if the website language is different. Install pip install -r requirements.txt Usage usage: cve201916394.py -h -u URL -f FILE -v optional arguments: -h, --help show this...