rdesktop

IMPORTANT: rdesktop is no longer maintained Please, beware that this project is no longer maintained and hadn't received a patch in many years. There are reported security vulnerabilities, yet those haven't been reviewed. Use with caution and use it at your own risk. rdesktop - A Remote Desktop...

toxssin

toxssin Purpose toxssin is an open-source penetration testing tool that automates the process of exploiting Cross-Site Scripting XSS vulnerabilities. It consists of an https server that works as an interpreter for the traffic generated by the malicious JavaScript payload that powers this tool...

CVE-2024-25202

CVE-2024-25202 A vulnerability was found in PHPgurukul visitor management system 1.0. it has been rated as problemic. Affected by the issue is some unknown functionality of the file search bar that called search-result.php and search-visitor.php . The vulnerability is Cross-Site-Scripting XSS...

BokuLoader

BokuLoader : Cobalt Strike Reflective Loader A proof-of-concept User-Defined Reflective Loader UDRL which aims to recreate, integrate, and enhance Cobalt Strike's evasion features! Contributors: Contributor| Twitter| Notable Contributions ---|---|--- Bobby Cooke| @0xBoku| Project original author...

CVE-2020-0683

CVE-2020-0683 Original Poc sent to MSRC. Assigned to CVE-2020-0683 - Windows Installer Elevation of Privilege https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-0683 Source code for Visual Studio C++ 2017 Please read the PDF that describes all the findings and steps to...

pycrypt

pycrypt Python Based Crypter That Can Bypass Any Kinds Of Antivirus Products Note: If the stub being detected then plz use the following obfuscations:- 1. https://github.com/machine1337/fudcrypt 2. https://github.com/machine1337/pyobfuscate Important: 1. Make Sure your payload file have all the...

esp32_esp8266_attacks

ESP32/ESP8266 Wi-Fi Attacks This repository is part of a research outcome from theASSET Research Group. This repository demonstrates 3 Wi-Fi attacks against the popular ESP32/8266 IoT devices: Zero PMK Installation CVE-2019-12587 - Hijacking ESP32/ESP8266 clients connected to enterprise networks;...

CVE-2019-15107

CVE-2019-15107 Python Exploit The exploit for CVE-2019-15107 webmin Acknowledgments Based on Metasploit module https://www.exploit-db.com/exploits/47230 Original advisory: https://pentest.com.tr/exploits/DEFCON-Webmin-1920-Unauthenticated-Remote-Command-Execution.html...

XcInspector

XcInspector: for Xcode Project Security XcInspector is a macOS app, and command line tool, to scan Xcode project files for possible security issues. Source Code Repository on GitLab List of planned checks rules Why? There are some ways that Xcode projects can be used to compromise security and...

zclaw

zclaw The smallest possible AI personal assistant for ESP32. zclaw is written in C and runs on ESP32 boards with a strict all-in firmware budget target of = 888 KiB on the default build. It supports scheduled tasks, GPIO control, persistent memory, and custom tool composition through natural...

ActiveScanPlusPlus

ActiveScan++ ActiveScan++ extends Burp Suite's active and passive scanning capabilities. Designed to add minimal network overhead, it identifies application behaviour that may be of interest to advanced testers: Potential host header attacks password reset poisoning, cache poisoning, DNS rebindin...

BYOVD-CVE-2023-52271-POC

Disclaimer: This repository contains code that is provided strictly for educational and research purposes only. DO NOT use this code on systems you do not own or have explicit permission to test. Any misuse of this code may violate local, national, or international laws. CVE-2023-52271 POC Exploi...

tiny_tracer

tinytracer A Pin Tool for tracing: API calls, including input and output of selected functions defined local functions, and functions from statically linked libraries selected instructions: RDTSC, CPUID, INT inline system calls, including parameters of selected syscalls transition between section...

Blackash-CVE-2025-0282

Blackash-CVE-2025-0282 Description A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution...

CVE-2024-46532

CVE number: CVE-2024-46532 vendor: Shanghai Dingxiang Information Technology Co., Ltd.https://www.kancloud.cn/ product: Internet Medical System Medical Outpatient OpenHIS version: V1.0 affected component: https://github.com/1638824607/OpenHIS?tab=readme-ov-file Reproduction of SQL Injection...

Log4j-RCE-Scanner

Feature • Requirements • Installation • Usage • Contact RCE scanner for Log4j Using this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses. Affected versions If you want to scan with a domain name, you must additionally install...

dirstalk

Dirstalk Dirstalk is a multi threaded application designed to brute force paths on web servers. The tool contains functionalities similar to the ones offered by dirbuster and dirb. Here you can see it in action: Contents How to use it Scan Useful resources Dictionary generator Download Developmen...

ActiveReign

ActiveReign ⚠️ Thank you for your support. This project is no longer publicly maintained. Background A while back I was challenged to write a discovery tool with Python3 that could automate the process of finding sensitive information on network file shares. After writing the entire tool with...

apache__dubbo_CVE-2021-30180_2-7-9

Apache Dubbo Project Apache Dubbo is a high-performance, Java-based open-source RPC framework. Please visit official site for quick start and documentations, as well as the wiki for news, FAQ, and release notes. We are now collecting Dubbo user info to help us to improve Dubbo further. Kindly...

CVE-2020-13671-old

CVE-2020-13671 RCE via File Upload — Drupal Core Software: Drupal Core 8.7.5 Affected: 7.x 7.78, 8.x 8.8.11, 8.9.x 8.9.9, 9.0.x 9.0.8 CVSS: 8.8 High CWE: CWE-434 — Unrestricted Upload of File with Dangerous Type CISA KEV: Yes — Known Exploited Vulnerability Advisory: SA-CORE-2020-012 What is Drup...