WP-CVE-2023-2732

WP-CVE-2023-2732 python 2.7 Buy Coffee : Bitcoin $: 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money $: U22270614 Refrence : https://github.com/RandomRobbieBF/CVE-2023-2732...

cve-2022-22965

Spring4Shell - CVE-2022-22965 Build let's clone the repository, build and run the container $ git clone https://github.com/twseptian/cve-2022-22965.git $ cd cve-2022-22965 $ docker build . -t spring4shell-poc $ docker run -p 8080:8080 --name spring4shell-poc spring4shell-poc check the access usin...

Py-RDP-Patcher

Py-RDP-Patcher Py-RDP-Patcher is a tool made in python to patch the termsrv file to allow simultaneous RDP sessions Setup Guide: This script only requires the art library which is installed by executing : pip install art Requirements: Python3, Windows Limitations: For now this script only support...

OracleOTM

OracleOTM Python tool for exploiting CVE-2021-35616 The script works in modules, which I implemented in the following order: ► Username enumeration ► Search for default credentials ► Run an SQL query using DBXML servlet ► Full exploitation and JSP execution The syntax of the script is as follows:...

exploit-writing-for-oswe

Exploit Writing for OSWE Background What This repository contains a list of useful snippets and tips that pertain to the writing of exploit scripts in the OSWE labs and certification exam. Some examples here may go against certain coding practices, but our end goal is to write the exploit script...

kibune

kibune A Sigma based detection pipeline. Note: this project is in an alpha state What is for To test a generic Sigma rule To create a Sigma based detection pipeline Features Manage Sigma rules Evaluate Sigma rules with a given input & record alerts Emit alerts send HTTP requests based on alerts...

extended-ssrf-search

Extended ssrf search This tool search for SSRF using predefined settings in different parts of a request path, host, headers, post and get parameters. First step Rename example.app-settings.conf to app-settings.conf and adjust settings. The most important setting is the callback url. I recommend ...

CVE-2022-22947

CVE-2022-22947 Usage: python3 CVE-2022-22947.py url...

CVE-2025-31161

CVE-2025-31161 - CrushFTP Exploit Script Description This repository contains a Python script to interact with the CrushFTP service vulnerable to CVE-2025-31161 The script allows you to list existing users and add a malicious user by exploiting the vulnerability. Features Check if the host is up...

CVE-2020-28458

CVE-2020-28458 Affected versions of this package are vulnerable to Prototype Pollution. datatables v1.10.16-1.10.16 run python file and it will ask for url, enter url...

dncil

dncil is a Common Intermediate Language CIL disassembly library written in Python that supports parsing the header, instructions, and exception handlers of .NET managed methods. Parsed data is exposed through an object-oriented API to help you quickly develop CIL analysis tools using dncil. Why...

dfirtriage

dfirtriage Digital forensic acquisition tool for Windows-based incident response. How to Use To run, drop dfirtriage.exe on the target or connected USB drive and execute with admin rights, -h for help. DFIRTriage v6.0 User's Manual Description This document outlines the functionality and proper u...

s3-bucket-take-0v3r

s3-bucket-take-0v3r S3 Bucket Takeover Scanner & Claim Tool 📌 Description S3 Bucket Takeover Scanner & Claim Tool is a Python 2.7-based utility that: 1. Scans domain names to identify potential Amazon S3 bucket takeover vulnerabilities. 2. Automatically claims unregistered S3 buckets and uploads ...

XSSYA

XSSYA-V2.0 has been Released - check https://github.com/yehia-mamdouh/XSSYA-V-2.0 XSSYA is a Cross Site Scripting Scanner & Vulnerability Confirmation Working in two Methods • Method number 1 for Confirmation Request and Response • Method number 2 for Confirmation Execute encoded payload and sear...

PiSavar

PiSavar - Detects PineAP module and starts deauthentication attack for fake access points - WiFi Pineapple Activities Detection About Project The goal of this project is to find out the fake access points opened by the WiFi pineapple device using the PineAP module and to prevent clients from bein...

CVE-2025-3248

CVE-2025-3248 Introduction Langflow versions prior to 1.3.0 are susceptible to unauthenticated code injection in the /api/v1/validate/code endpoint via Python exec function. This exploit establishes a reverse shell connection abusing this vulnerability. Usage Configuration git clone...

the-endorser

🚨 The Endorser is no longer maintained. If you need support or consultation for your OSINT endeavours, drop me an e-mail [email protected] 🚨 The Endorser An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills. Check out the example digraph,...

CVE-2025-5840

CVE-2025-5840 CVE-2025-5840 Exploit In Python By hax / haxerr9 How To Use: Make sure Python3 is installed at system. Run "python3 CVE-2025-5840.py URL -c COMMAND". Don't forget to give it parameters before running the script. Example Use: NOT TESTED This exploit is not tested in a lab environment...

CVE-2012-2982_Python

CVE-2012-2982Python PoC Python script as an exercice from tryhackme: https://tryhackme.com/room/intropocscripting This is the metasploit CVE: https://www.exploit-db.com/exploits/21851 Those are the changes done after the discovery of the Exploit:...

CVE-2023-27350

CVE-2023-27350 Python 2.7 Buy Coffee : Bitcoin $: 31mtLHqhaXXyCMnT2EU73U8fwYwigiEEU1 Perfect Money $: U22270614 Reff : https://nvd.nist.gov/vuln/detail/CVE-2023-27350 Shodan Dork http.html:"papercut" http.html:"papercut" port:9191 http.title:"PaperCut Login"...