honssh

!!! This project is no longer maintained. !!! HonSSH https://github.com/tnich/honssh Copyright C 2016 Thomas Nicholson HonSSH is designed to be used in conjunction with a high interaction honeypot. HonSSH sits between the attacker and the honey pot and creates two separate SSH conncetions. Read t...

SpEL

SpEL Batch detection tool for Spring Cloud Gateway Actuator API SpEL expression injection command execution CVE-2022-22947 Usage Write the URLs to be tested line by line in a file. Use parameter -TF to specify the file, and -t for concurrency count. Execution Result Yutu Security is committed to...

CVE-2016-5699-poc

CVE-2016-5699-poc PoC code of CVE-2016-5699 Vulnerability poc.py file is url sender to receiver.py receiver.py is Flask http receive headers testing Video : https://youtu.be/ugUt5iKpcV4 bunseokbot@UpRoot...

Nac_Bypass_Agent

Nac Bypass Agent This piece of code is a script written in Python and designed to run on Kali Linux. Here is a summary explaining what each function does: runcommandcommand: This function runs the command it takes as input and returns its output. killnetworkservices: This function stops the...

RdpThief

RdpThief RdpThief by itself is a standalone DLL that when injected in the mstsc.exe process, will perform API hooking, extract the clear-text credentials and save them to a file. An aggressor script accompanies it, which is responsible for managing the state, monitoring for new processes and...

SAP_RECON

PoC for CVE-2020-6287, CVE-2020-6286 SAP RECON vulnerability Pffff! RECON Remotely Exploitable Code On NetWeaver? Guys, really? That was the best codename you came up with? : This scrip allows to check SAP LM Configuration Wizard missing authorization check vulnerability and as a PoC script...

Blackbone

Blackbone Windows memory hacking library Features x86 and x64 support Process interaction Manage PEB32/PEB64 Manage process through WOW64 barrier Process Memory Allocate and free virtual memory Change memory protection Read/Write virtual memory Process modules Enumerate all 32/64 bit modules...

exitmap

This repository is unmaintained. Refer toThe Tor Project's fork. Overview Exitmap is a fast and modular Python-based scanner for Tor exit relays. Exitmap modules implement tasks that are run over a subset of all exit relays. If you have a background in functional programming, think of exitmap as ...

CVE-2023-22518

CVE-2023-22518 Checker for CVE-2023-22518 and CVE-2023-22515 critical vulnerabilities in Confluence. Description This script is designed to check for and exploit vulnerabilities in Atlassian Confluence instances. It checks for the vulnerability CVE-2023-22518, and exploits the vulnerability...

BadAssMacros

BadAssMacros Description Proof of Concept tool to generate malicious macros leveraging techniques like VBA Purging and Shellcode Obfuscation to evade AV engines. This tool takes in raw shellcode that can be generated by popular C2 frameworks like Metasploit,Cobalt Strike etc and outputs a VBA...

CVE-2026-25243

CVE-2026-25243 — Redis RESTORE double-free → remote code execution Verified against Rocky Linux 8.10, aarch64, Redis 8.6.2, jemalloc 5.3.0. Reference: https://www.zeroday.cloud/blog/redis-cve-2026-25243-deep-dive TLDR; Stable exploit, works against variety of OS distro and architecture. Executive...

Spring_cve-2022-22980

Springcve-2022-22980 spring data mongodb remote code execution | cve-2022-22980 poc Description A Spring Data MongoDB application is vulnerable to SpEL injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value...

CVE-2022-22947_EXP

1. Spring Cloud Gateway Remote Code Execution Vulnerability Hazard Level: High POC/EXP: Public CNVD ID: CNNVD-2022-16402 CVE ID: CVE-2022-22947 2. Affected Versions: VMWare Spring Cloud GateWay 3.1.0 VMWare Spring Cloud GateWay =3.0.0, python cve-2022-22947.py 验证单个目标： 1、python cve-2022-22947.py...

CVE-2024-25641-CACTI-RCE-1.2.26

CVE-2024-25641 - Cacti 1.2.26 - Arbitrary file write to RCE 🌵 Authenticated RCE Cacti version v1.2.26 Summary An arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code ...

dheater

DHEater DHEater is the proof-of-concept implementation of the DHEat attack CVE-2002-20001. For further information about the attack visit the project page or read the full technical paper on IEEE Access. Disclaimer DHEater is a proof-of-concept denial-of-service tool intended only for defensive...

porterminal

Give your agent any computer One command. One URL. A real terminal for your agent, a live view for you. Run Porterminal on a Windows, macOS, or Linux computer and give the generated link to your AI agent. It gets a real shell with the files, tools, and projects on that machine. Open the same link...

cve-2022-46718-leaky-location

CoreParsecLocation tl;dr add an entitlement check toparsecd Overview CoreParsecLocation is a sample application demonstrating how a third-party app can access a user's precise location without a user's consent or permission. parsecd/CoreParsec also provides information such as localized search...

CVE-2024-27348

CVE-2024-27348 For Ethical Usages only, Any harmful or malicious activities are not allowed. And it's your own responsability You Can Read the analysis for the vulnerability from here: https://blog.securelayer7.net/remote-code-execution-in-apache-hugegraph/ Apache HugeGraph Server RCE Scanner...

redpill

:octocat: Project Description The redpill project aims to assist reverse tcp shells in post-exploration tasks. Often, on redteam appointments we need to use unconventional ways to access the target system, like reverse tcp shells not metasploit in order to bypass the defenses implemented by the...

Digital-Signature-Hijack

Digital Signature Hijack Hijacking legitimate digital signatures is a technique that can be used during red team assessments in order to sign PowerShell code and binaries. This could assist to bypass Device Guard restrictions and maintain stealthy in an engagement. DigitalSignatureHijack is a...