probequest

========== ProbeQuest |PyPI Package| |PyPI Downloads| |PyPI Python Versions| |Build Status| |LGTM Grade| |LGTM Alerts| |Documentation Status| Toolkit allowing to sniff and display the Wi-Fi probe requests passing nearby your wireless interface. Probe requests are sent by a station to elicit...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

bfac

BFAC Advanced Backup-File Artifacts Testing for Web-Applications BFAC Backup File Artifacts Checker is an automated tool that checks for backup artifacts that may disclose the web-application's source code. The artifacts can also lead to leakage of sensitive information, such as passwords,...

beef

=============================================================================== Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com See the file 'doc/COPYING' for copying permission...

requests-ip-rotator

Proudly sponsored by Swiftproxy High-performance residential proxies with an 80M+ IP pool across 195+ countries — improve request success rates and reduce IP blocks during large-scale data collection and browser automation. Perfect for use with requests-ip-rotator, Playwright, Selenium, and other...

bypass-url-parser

Bypass URL Parser A tool that tests MANY URL bypasses to reach a 4xx-protected page. If you wonder why this code is nothing but a dirty curl wrapper, here's why: Most Python HTTP clients perform URL/path/parameter encoding and decoding, and I hate this. If I submit raw chars, I want raw chars to ...

ASUS-AiCloud-RCE

Origasus A Go program compiled with origasus.go, written for examining endpoints that can be associated with ASUS AiCloud / AsusWRT within the scope of authorized security testing or defense analysis e.g., your own device, a pentest lab environment. Important: The use of such software against...

zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to use this repo in...

white-deface

Author WHITE-DEFACE This is a simple tool to automatically deface vulnerable websites. Tutorial video link at last of this page ⚠️ It uses WebDav vulnerability to exploit. This script sends a PUT requests to the websites given in the targets.txt file. Unauthenticated requests will be accepted and...

Blackash-CVE-2025-55182

🚨 CVE-2025-55182 — Critical React Server Vulnerability 🧠 What It Is ⚛️ A critical security flaw in React Server Components RSC 🧨 Caused by unsafe deserialization 🌐 Exploitable via network requests 🔓 No authentication required ☠️ Can lead to Remote Code Execution RCE ✅ This means attackers could...

http_bridge

Http Bridge Motivation I've wrote this program as a proof of concept to test the idea of be able to send tcp stream packets over simple http request like PUT, PATCH, POST, GET, without use a proxy way like CONNECT method. Also as a practice exercise to train my novice skill on rust language...

truegaze

truegaze A static analysis tool for Android and iOS applications focusing on security issues outside the source code such as resource strings, third party libraries and configuration files. Requirements Python 3 is required and you can find all required modules in the requirements.txt file. Only...

cve2018-13379-nmap-script

cve2018-13379-nmap-script CVE-2018-13379 Script for Nmap NSE An Improper Limitation of a Pathname to a Restricted Directory "Path Traversal" in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted...

CVE-2021-46070

CVE-2021-46070 Exploit Title: Vehicle Service Management System - 'Service Requests' Stored Cross Site Scripting XSS Exploit Author: SANU P.L CVE: CVE-2021-46070 CVSS: 4.8 MEDIUM References: https://www.plsanu.com/vehicle-service-management-system-service-requests-stored-cross-site-scripting-xss...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

x64dbg

x64dbg An open-source binary debugger for Windows, aimed at malware analysis and reverse engineering of executables you do not have the source code for. There are many features available and a comprehensive plugin system to add your own. You can find more information on the blog! Screenshots |...

XSSTRON

XSSTRON, Electron JS Browser To Find XSS Vulnerabilities Powerful Chromium Browser to find XSS Vulnerabilites automatically while browsing web, it can detect many case scenarios with support for POST requests too Installation Install Node.js and npm https://www.npmjs.com/get-npm or sudo apt insta...

CVE-2025-55182_RCE_Exploit

CVE-2025-55182RCEExploit REC Exploit is a Python-based security testing tool that automates detection of potential RCE conditions in web applications under authorized environments. It sends crafted POST requests to targets, analyzes server responses for execution indicators, and supports batch...

CVE-2025-5777

CVE-2025-5777 - Citrix NetScaler Memory Leak Exploit 📌 Overview This tool demonstrates CVE-2025-5777 , a critical memory disclosure vulnerability in Citrix NetScaler ADC/Gateway devices. The exploit leaks sensitive memory contents via malformed authentication requests. Key Features: ✔ Memory leak...

padding-oracle-attacker

padding-oracle-attacker CLI tool and library to execute padding oracle attacks easily, with support for concurrent network requests and an elegant UI. Install Make sure Node.js is installed, then run $ npm install --global padding-oracle-attacker or $ yarn global add padding-oracle-attacker CLI...