CVE-2025-55182_RCE_Exploit

CVE-2025-55182RCEExploit REC Exploit is a Python-based security testing tool that automates detection of potential RCE conditions in web applications under authorized environments. It sends crafted POST requests to targets, analyzes server responses for execution indicators, and supports batch...

CVE-2025-49132

CVE-2025-49132-POC I made this poc for my personal challenge inspired by 0xtensho Made for cleaner output and only for reverse shell Usage: Change the host and the listener variable first python3 CVE-2025-49132POC.py Disclaimer LEGAL DISCLAIMER: This Proof of Concept PoC is for educational purpos...

EvilOSX

EvilOSX A pure python, post-exploitation, remote administration tool RAT for macOS / OS X. Features Emulate a simple terminal instance. Sockets are encrypted with CSR via OpenSSL. No dependencies pure python. Persistence. Auto installer, simply run EvilOSX on the target and the rest is handled...

w12scan-client

w12scan-client Network asset search and discovery engine, large-scale asset identification, graduation project, w12scan client program Design Philosophy The client's philosophy is to only process the data url, ip it receives, without automatically following 301 redirects based on URLs, nor scanni...

CVE-2025-47273-POC

setuptools Path Traversal CVE-2025-47273 📖 Overview Proof-of-concept exploit for a path traversal vulnerability in Python setuptools pythonserver.py 'EOF' import http.server import socketserver class Handlerhttp.server.SimpleHTTPRequestHandler:...

malwoverview

Malwoverview !Alt...

adversarial-robustness-toolbox

Adversarial Robustness Toolbox ART v1.20 中文README请按此处 Fallback image description Adversarial Robustness Toolbox ART is a Python library for Machine Learning Security. ART is hosted by the Linux Foundation AI & Data Foundation LF AI & Data. ART provides tools that enable developers and researchers...

keyhacks

KeyHacks shows methods to validate different API keys found on a Bug Bounty Program or a pentest. @Gwen001 has scripted the entire process available here and it can be found here Table of Contents ABTasty API Key Algolia API key Amplitude API Keys Asana Access token AWS Access Key ID and Secret...

Re2Pcap

Re2Pcap: Create PCAP file from raw HTTP request or response in seconds Re2Pcap is abbreviation for Request2Pcap and Response2Pcap. Community users can quickly create PCAP file using Re2Pcap and test them against Snort rules. Re2Pcap allow you to quickly create PCAP file for raw HTTP request shown...

autocrack

AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...

Kunyu

Kunyu坤舆 - More efficient corporate asset collection English | 中文文档 0x00 Introduce Tool introduction Kunyu kunyu, whose name is taken from , is actually a professional subject related to geographic information, which counts the geographic information of the sea, land, and sky. The same applies to...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...

DumpSMBShare

A python script to dump files and folders remotely from a Windows SMB share. Features Only list shares with --list-shares. Select only files with given extensions with --extensions or all files. Choose the local folder to dump to with --dump-dir. Select base folder to search from in the share wit...

targetedKerberoast

targetedKerberoast targetedKerberoast is a Python script that can, like many others e.g. GetUserSPNs.py, print "kerberoast" hashes for user accounts that have a SPN set. This tool brings the following additional feature: for each user without SPNs, it tries to set one abuse of a write permission ...

wapiti

================================== Wapiti - Web Vulnerability Scanner .. image:: https://img.shields.io/pypi/v/wapiti3?label=PyPI&logo=PyPI&logoColor=white&color=blue :alt: PyPI version :target: https://pypi.python.org/pypi/wapiti3 .. image:: https://img.shields.io/pypi/pyversions/wapiti3 :alt:...

Apache-Struts-Shodan-Exploit

APACHE STRUTS SHODAN EXPLOIT POC Author: @037 Original code can be found here. This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers. Shodan search parameter has been left out to weed out any skids trying to use this...

Exif-Grabber

About Exif Grabber Beta Version Exif Grabber is a python tool designed to extract exif data from picture with two methods Screenshot Screenshot showing a part of it working Requirement Exifread library :https://pypi.python.org/pypi/ExifRead Installation $ git clone...

pwntools

pwntools - CTF toolkit Pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible. from pwn import contextarch = 'i386', os = 'linux' r =...

Python Security Project

🔐 Desktop Cryptographic File Encryption & Decryption Tool A production-grade Python desktop security utility designed to protect local filesystem assets through authenticated symmetric encryption. This application features a responsive graphical user interface GUI built with Tkinter, an independe...

sudo-snooper

sudo-snooper sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge...