fierce

Fierce Fierce is a DNS reconnaissance tool for locating non-contiguous IP space. Useful links: Domain Name System DNS Domain Names - Concepts and Facilities Domain Names - Implementation and Specification Threat Analysis of the Domain Name System DNS Name Servers NS State of Authority Record SOA...

CVE-2019-0708-EXP-Windows

CVE-2019-0708-EXP-Windows-Version Disclaimer The author's PoC is for research purposes only. If readers use this PoC for other activities, the author is not responsible. Table of Contents toc Introduction CVE-2019-0708-EXP-Windows version runs as a single executable file, no need for Linux, Pytho...

xssearch

xssearch Advanced XSS detection tool written in Rust, combining context-aware payload intelligence with the injection breadth. This tool was inspired XSStrike and XSSER. The payload was collected from different sources: https://github.com/ardakocadoru/xss-cheatsheet...

kalici-dosya-silme-araci

Permanent File Deletion Tool & Kalıcı Dosya Silme Aracı This project is a simple tool that allows users to permanently delete specified files. The program overwrites the specified file with random data, changes the content of the file, and then deletes it, effectively removing any traces of the...

CVE-2022-36804

CVE-2022-36804 Bitbucket RCE 2022 This repo is part of the hgrab-framework dork title: "Public Repositories - Bitbucket" Affected product - Bitbucket Server and Data Center 7.6 prior to 7.6.17 - Bitbucket Server and Data Center 7.17 prior to 7.17.10 - Bitbucket Server and Data Center 7.21 prior t...

phone-deck

phone-deck Turn a spare Android phone or any device with a browser into a self-hosted control deck and remote desktop for your Linux workstation — over your private Tailscale network, with no third-party apps. It started as "what do I do with an old phone?" and became a control plane for a Hyprla...

CVE-2023-22518

CVE-2023-22518 An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22518 Improper Authorization Vulnerability Installation: git clone https://github.com/sanjai-AK47/CVE-2023-22518 cd CVE-2023-22518 python3 exploit.py Usage: python3 exploit.py -h usage: exploit.py...

divd-2021-00038--log4j-scanner

divd-2021-00038--log4j-scanner This scanner will recursively scan paths including archives for vulnerable log4j versions and org/apache/logging/log4j/core/lookup/JndiLookup.class files. Currently the allow list defines non exploitable versions, in this case log4j-core 2.17.0 and 2.12.3. Features...

onioff

██████╗ ███╗ ██╗██╗ ██████╗ ███████╗███████╗ ██╔═══██╗████╗ ██║██║██╔═══██╗██╔════╝██╔════╝ ██║ ██║██╔██╗ ██║██║██║ ██║█████╗ █████╗ ██║ ██║██║╚██╗██║██║██║ ██║██╔══╝ ██╔══╝ ╚██████╔╝██║ ╚████║██║╚██████╔╝██║ ██║ ╚═════╝ ╚═╝ ╚═══╝╚═╝ ╚═════╝ ╚═╝ ╚═╝ v2.0 A simple tool - written in pure python - f...

appsec-agent

AppSec Agent AI-powered security agents for code review, PR scanning, threat modeling, fix generation, and more. You can use AppSec Agent in three ways: Path| Best for| Get started ---|---|--- CLI agent-run| Trying agents from your terminal| Getting started npm library| Building your own app or...

burpfox

🦊 BurpFox A Burp Suite extension that integrates Dalfox XSS scanner directly into your workflow. Features 🎯 Right-click scanning - Scan requests directly from Proxy History or Repeater. ⚙️ Full Dalfox options - Context-aware, WAF evasion, Blind XSS and more. Prerequisites 1. Install Dalfox...

CVE-2021-1675

CVE-2021-1675 Impacket implementation of the PrintNightmare PoC originally created by Zhiniang Peng @edwardzpeng & Xuefeng Li @lxf02942370 Tested on a fully patched 2019 Domain Controller Execute malicious DLL's remote or locally Installation Before running the exploit you need to install my...

PETriage

PETriage A fast, cross-platform PE Portable Executable surface analysis tool for malware triage, written in Rust. Designed for analysts who need practical PE triage on Linux, macOS, and Windows without relying on a Windows-only workflow. Formerly readpe renamed to avoid naming collisions with...

DVR-Exploiter

DVR-Exploiter Exploit Title: DVR Credentials Exposed Date: 09/04/2018 Exploit Author: Fernandez Ezequiel DVR-Exploiter By: Belahsan Ouerghi Contact: www.facebook.com/ouerghi.belahsan Youtube Tutorial: https://www.youtube.com/watch?v=vdnATjE4II Dorks: intitle:"DVR Login" html:"/login.rsp" "Server:...

ngxray

ngxray Static vulnerability scanner for nginx configurations. Parses configs with nginx's own tokenizer and matches against declarative JSON rules to detect known CVEs in rewrite/script engine directive patterns. Quick start cd ngxray git submodule update --init make python3 scan.py...

Loki.Rat

Loki.Rat ||||||||||||||||||||||||||||||||||||||||||||00000000000||||||||||||||||||||||||||||||||||||||||| \ ||||||||||||||||||||||||||||||||||||||||||||00000000000||||||||||||||||||||||||||||||||||||||||| \...

CVE-2024-48990

CVE-2024-48990 !WARNING These files and informations are intended for educational purpose only. The author is not responsible for any malicious behavior. All informations provided are not intended to incite any type of crime or abuse. Description Qualys discovered that needrestart, before version...

Mass-exploit-CVE-2022-29464

Meow Meow Meow! Just a Mass Exploit based on a Python PoC for WSO2 Carbon Server CVE-2022-29464 Pre-auth RCE bug CVE-2022-29464. Meow Meow Meow? Requirements? Python3 Shodan Zoomeye A Brain What is this tool? This is a mass-autoscan-exploit of CVE-2022-29464 based on the PoC wrote in python by a...

CVE-2016-5195

Description: dcow is a possible exploit of the vulnerability CVE-2016-5195. Running the program as unprivileged user on a vulnerable system, it'll modify the /etc/passwd file, forcing the password "dirtyCowFun" SHA-512, but could be modified for older standards. In case of successful execution,...

CVE-2023-7028-Docker

CVE-2023-7028 with Docker 🎯 Want to practice with the new gitlab CVE ? Follow the instructions Build the lab 1. Install Docker : https://docs.docker.com/get-docker/ 2. Clone the project : git clone https://github.com/Trackflaw/CVE-2023-7028-Docker.git. 3. Go to the project : cd CVE-2023-7028-Dock...