CVE-2024-28397-js2py-Sandbox-Escape

CVE-2024-28397-js2py-Sandbox-Escape js2py Vulnerability Analysis Introduction js2py is a popular python package that can evaluate javascript code inside the python interpreter. It is used by various web scrapers to parse javascript code on websites. There exists a vulnerability in the...

CVE-2026-53753-Crawl4AI-RCE

CVE-2026-53753 — Crawl4AI Unauthenticated Remote Code Execution AST Sandbox Escape Pre-authentication RCE in Crawl4AI.read — returning the command's output in-band in the JSON response. | ---|--- CVE| CVE-2026-53753 Advisory| GHSA-qxjp-w3pj-48m7 Affected| Crawl4AI Deep dive: see ANALYSIS.md for a...

Athanasius

Athanasius Hacking Framework Installation 1.Clone Repo git clone https://github.com/shyam999/Athanasius.git 2.Install Requirements pip install -r requirements.txt 3.Install hydra sudo apt install hydra 4.Run The Script python athanasius.py Screenshot Where to find Me Like Me on Facebook Or visit ...

CVE-2020-0796

CVE-2020-0796 Remote overflow POC POC to check for CVE-2020-0796 / "SMBGhost" Usage Make sure Python is installed, then run cve-2020-0796.py...

cve-2017-5638

cve-2017-5638 cve-2017-5638 Vulnerable site sample This project aims to demonstrate the CVE-2017-5638 exploitation for educational purpose. For more informations, see https://cwiki.apache.org/confluence/display/WW/S2-045 Legal Disclaimer This project is made for educational and ethical testing...

DivideAndScan

DivideEt Impera And Scan and also merge the scan results Featured Projects NixOS| ---|--- NixOS| offsec.tools D ivideA ndS can is used to efficiently automate port scanning routine by splitting it into 3 phases: 1. Discover open ports for a bunch of targets. 2. Run Nmap individually for each targ...

CVE-2026-46442-PoC

CVE-2026-46442 Proof of Concept Academic & Defensive Research Notice This repository contains a proof-of-concept PoC developed strictly for academic analysis, defensive research, and vulnerability validation purposes. The objective of this project is to help security researchers, defenders, and...

POC_CVE-2023-21839

CVE-2023-21839 Translated the GO version of @4ra1n into Python based on specific needs, thanks again! Disclaimer This program should only be used for authorized security testing and research purposes. Users should comply with the Cybersecurity Law and use it reasonably. Any illegal attacks or oth...

NotProxyShellScanner

NotProxyShellScanner Python implementation for NotProxyShell aka CVE-2022-40140 & CVE-2022-41082. Setup Install the requirements all that's required is python3 requests. pip3 install -r requirements.txt Running There are a few options when it comes to running the tooling: usage: NotProxyShell.py ...

CVE-2022-25477

CVE-2022-25477 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python...

CRLFsuite

CRLFsuite - CRLF injection scanner The project is no more managed by developers. CRLFsuite is a powerful tool for CRLF injection detection and exploitation. Want to know how it works. Here's how Installation You can install CRLFsuite using pip as given below: pip3 install crlfsuite or download th...

Cr3dOv3r

Cr3dOv3r Your best friend in credential reuse attacks. You give Cr3dOv3r an email then it does two simple useful jobs with it: Search for public leaks for the email and returns the result with the most useful details about the leak Using haveibeenpwned API and tries to get the plain text password...

f5_rce_poc

Usage python3 f5rce.py -u 指定目标URL -f 批量检测文件 -c 执行命令 -s/--ssrf 通过ssrf获得token执行命令 The effect is as shown below: python3 f5rce.py -u 127.0.0.1 --ssrf After executing the command, enter exit to exit PS: The output is not elegant enough, I will modify it 😁 Future Updates: Fixed some command execution...

CVE-2023-44487

HTTP2 Rapid Reset Attack: CVE-2023-44487 Quick exploit to test out rapid reset attack CVE-2023-44487. Note: For education purpose only Exploit: Quick exploit to test out rapid reset attack CVE-2023-44487. Note: For education purpose only Table of Contents Installation Usage Installation Clone the...

KnockMail

KnockMail Copyright 2017 KnockMail Written by: Alisson Moretto - 4w4k3 Twitter: @4w4k3Official Cloning: git clone https://github.com/4w4k3/KnockMail.git Running: cd KnockMail sudo su pip install -r requeriments.txt python knock.py If you have another version of Python: python2.7 knock.py Screen...

PyFuscation

PyFuscation Requires python3 usage: PyFuscation.py -h -f -v -p --ps SCRIPT Optional arguments: • -h, --help show this help message and exit • -f Obfuscate functions ○ Do this First ... Its probably the most likely to work well • -v Obfuscate variables ○ If your going to obfuscate variables do the...

arsenal

Arsenal Arsenal is just a quick inventory, reminder and launcher for pentest commands. This project written by pentesters for pentesters simplify the use of all the hard-to-remember commands In arsenal you can search for a command, select one and it's prefilled directly in your terminal. This...

bochscpu-python

bochscpu-python Python bindings for @yrp's BochsCPU using FFI to easily and accurately emulate x86 code. Install bochscpu-python requires a Python environment of 3.8 or more recent only. Via PyPI preferred By far the simplest way to get things up and running is using the stable packaged version o...

SearchPhone

SearchPhone 🕵🏽‍♂️ Is a comprehensive OSINT tool for looking up linked phone number information, using multiple APIs to gather information from various sources. Developed for use with Python from the terminal. 👁 ✨ Features 📱 Phone Number Validation - Validates and formats phone numbers using...

NetSpecter

NetSpecter NetSpecter is a lightweight yet powerful asynchronous OSINT and reconnaissance engine built in Python. It combines multi-source intelligence gathering DNS, WHOIS, Web, TLS, HTTP, Geo, Reverse DNS with Shodan-powered security intelligence and full raw data access, providing a complete...