CVE-2021-21425-RCE

this is my version i found a lot in internet but those are too bad USAGE python3 exploit.py -u http://IP/grav-admin/ --lhost YOUR TUN0 IP --lport 4444 wait.. for 60sec you will get shell at your listener...

PyFuscation

PyFuscation Requires python3 usage: PyFuscation.py -h -f -v -p --ps SCRIPT Optional arguments: • -h, --help show this help message and exit • -f Obfuscate functions ○ Do this First ... Its probably the most likely to work well • -v Obfuscate variables ○ If your going to obfuscate variables do the...

Name-That-Hash

➡️ Discord | Website ⬅️ The Modern Hash Identification System pip3 install name-that-hash && nth Web App with no install needed 🤔 What is this? Have you ever come across a hash such as 5f4dcc3b5aa765d61d8327deb882cf99 and wondered what type of hash that is? 🤔 Name-that-hash will name that hash...

parsedmarc

parsedmarc parsedmarc is a Python module and CLI utility for parsing DMARC reports. When used with Elasticsearch and Kibana or Splunk, or with OpenSearch and Grafana, it works as a self-hosted open-source alternative to commercial DMARC report processing services such as Agari Brand Protection,...

SECMON

SECMON - Infosec Watching Tool -red Description SECMON is a web-based tool for the automation of infosec watching and vulnerability management with a web interface. A demo is available here. A Discord channel is available here Features Mail alerting when a new CVE is published and which concerns...

dnsFookup

DnsFookup v 2.0.1 DNS Rebinding freamwork containing: a dns server obviously python web api to create new subdomains and control the dns server, view logs, stuff like that shitty react app to make it more comfy Changelog API documentation What does it do? It lets you create dns bins like a burp...

DSXS

Damn Small XSS Scanner Damn Small XSS Scanner DSXS is a fully functional Cross-site scripting vulnerability scanner supporting GET and POST parameters written in under 100 lines of code. As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie...

BabyShark

INTRO This is a basic C2 generic server written in Python and Flask. This code has based ideia to GTRS, which uses Google Translator as a proxy for sending commands to the infected host. The BabyShark project aims to centralize reverse connections with agents, creating a way to centralize several...

CVE-2026-39636-vulnerability-exp

1. Burp Suite must be opened before running here !! And the default Burp Suite port must be 8080. If it is different, you can change it yourself. 2. Download the required libraries pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. Just run it directly CVE-2026-39363...

Bashfuscator

Bashfuscator Documentation What is Bashfuscator? Bashfuscator is a modular and extendable Bash obfuscation framework written in Python 3. It provides numerous different ways of making Bash one-liners or scripts much more difficult to understand. It accomplishes this by generating convoluted,...

AMDH

AMDH Android Mobile Device Hardening written with python3. Android version, PObY-A Privacy Owned by You - Android, with malware and settings scans is available on the Play Store and the source code can be found HERE Motivations AMDH was created to help automate scanning installed applications on...

CVE-2026-4861

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

RLSA-2026:84798 Important: pcs security update

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fixes: python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields CVE-2026-82397 python-tornado: Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding...

pcs security update

An update is available for pcs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The pcs packages provide a command-line configuration system for the Pacemaker an...

CVE-2021-37832

CVE-2021-37832 CVE 2021-37832 poc usage : python3 CVE-2021-37832.py http://test.com...

WAFNinja

WAFNinja WAFNinja - Penetration testers favorite for WAF Bypassing WAFNinja is a CLI tool written in Python. It shall help penetration testers to bypass a WAF by automating steps necessary for bypassing input validation. The tool was created with the objective to be easily extendible, simple to u...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

mariana-trench

Mariana Trench Mariana Trench is a security focused static analysis platform targeting Android. This guide will walk you through setting up Mariana Trench on your machine and get you to find your first remote code execution vulnerability in a small sample app. These instructions are also availabl...

pip-audit

pip-audit pip-audit is a tool for scanning Python environments for packages with known vulnerabilities. It uses the Python Packaging Advisory Database https://github.com/pypa/advisory-database via the PyPI JSON API as a source of vulnerability reports. This project is maintained in part by Trail ...

secretflow

简体中文｜English SecretFlow is a unified framework for privacy-preserving data intelligence and machine learning. To achieve this goal, it provides: An abstract device layer consists of plain devices and secret devices which encapsulate various cryptographic protocols. A device flow layer modeling...