72948 matches found
msspray
Note: This repository is no longer being developed msspray.py MSSpray is used to conduct password spray attacks against Azure AD as well as validate the implementation of MFA on Azure and Office 365 endpoints ------------------------------------------------------------ | ;--- Check each endpoint...
CVE-2019-19782
CVE-2019-19781 Supports batch detection Usage: python CVE-2019-19781.py To detect target URLs, create url.txt in the current script directory. url.txt, one per line: http://xxx:port/ https://xxx:port/ Output: Vulnerable links: res.txt Error links: log.txt...
CVE-2025-49132
CVE-2025-49132 Standalone Vulnerability Scanner Non-Docker Implementation This scanner operates directly on Python without Docker dependencies, suitable for environments where Docker is not available or preferred. Installation pip install -r requirements-standalone.txt Manual installation: pip...
CVE-2021-21315-exploit
CVE-2021-21315 Exploit Des: My python Script to exploit system Information Library for Node.JS npm package "systeminformation". npmjs.com/systeminformation I thought this POC will not show real world impact, But it'll be cool in CTF's...
CVE-2025-5840
CVE-2025-5840 CVE-2025-5840 Exploit In Python By hax / haxerr9 How To Use: Make sure Python3 is installed at system. Run "python3 CVE-2025-5840.py URL -c COMMAND". Don't forget to give it parameters before running the script. Example Use: NOT TESTED This exploit is not tested in a lab environment...
domain-enumeration-sicarius
Sicarius 🐴 ⚡️ Fast subdomain enumeration tool 🐴 ⚡️ 🦆 @unp4ck 🪳🫠 Install git clone github.com/unp4ck/sicarius.git cd sicarius touch config/config.yaml add your apis keys here! pip3 install -r requirements.txt --user Post Installation API Key is needed before querying on third-party sites; Sicarius...
CVE-2023-28121
python main.py list.txt -t 50 --telegram...
CVE-2015-1635_PoC
usage: python3 CVE-2015-1635PoC.py e.g. python3 CVE-2015-1635PoC.py http://www.xxx.com...
CVE-2024-0235
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-0235 Run bellow command to check CVE-2024-0235 -h Configurations 2. We integrated with the Telegram API to receive...
Aggressor-Aggregator
Aggressor Aggregator Description A helper script for consolidating Aggressor Script and Beacon Object File BOF repositories into a single CNA for Cobalt Strike. Designed for automation in red team CTF environments with frequent setup/destruction of operator clients. This script is essentially a...
CVE-2019-9670
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2019-9670 Run bellow command to check CVE-2019-9670 -h Configurations 2. We integrated with the Telegram API to receive...
CVE-2019-10945
CVE-2019-10945 This is a Python 3 port of the original exploit from Haboob Team: https://www.exploit-db.com/exploits/46710...
apache-struts-v2-CVE-2017-5638
apache-struts-v2-CVE-2017-5638 Working POC for CVE 2017-5638 This repo contains a working python example demonstrating the RCE capabilities of CVE 2017-5638. Also for reference is included the Struts Showcase WAR file...
CVE-2022-46169
CVE-2022-46169 POC Proof of concept / CTF script for exploiting CVE-2022-46169 in Cacti, versions =1.2.22 This script was written to solve a CTF challenge. It was based on the following example scripts - I had difficulty understanding what these scripts actually did, so I re-wrote my own...
bucket-brute
bucket-brute Aws S3 Tko Tool usage: bucket-brute.py -h -u URL -p PROXY -b BUCKET optional arguments: -h, --help show this help message and exit -u URL, --url URL No Such Bucket URL -p PROXY, --proxy PROXY Proxy for debugging -b BUCKET, --bucket BUCKET Bucket Name Example Creating mytest in region...
CVE-2024-9933
CVE-2024-9933 Usage Usage: python CVE-2024-9933 .py option URL Options: check : Verify if the target URL is vulnerable. exploit : Attempt to exploit the vulnerability on the provided URL. Examples: python CVE-2024-9933 .py check http://example.com python CVE-2024-9933 .py exploit http://example.c...
WinRar_ACE_exploit_CVE-2018-20250
WinRar ACE exploit CVE-2018-20250 This program is an script developed in Python which exploit the ACE vulnerability on WinRar - Vulnerability CVE-2018-20250 It is based on previous project developed by WyAtu It is used for educational purposes on Daniel Vispo Blog How to generate the evil exploit...
FuegoTest
FuegoTest FuegoTest is a Command Line Interface CLI tool designed to detect devices potentially vulnerable to CVE-2023-20048 in Cisco Firepower Management Center FMC. Utilizing the rich library, FuegoTest provides an enhanced user experience with progress bars and styled text for terminal output...
CVE-2024-28397-js2py-Sandbox-Escape
Introduction 中文 js2py is a popular python package that can evaluate javascript code inside the python interpreter. It is used by various web scrapers to parse javscript code on websites. There is a vulnerability in the implementation of global variables within js2py, which could allow an attacker...