PoC---CVE-2018-6389

PoC - CVE-2018-6389 Proof of Concept of vunerability CVE-2018-6389 on Wordpress 4.9.2. This vulnerability lets a remote unauthenticated attacker to cause DoS of a Wordpress based web application. Presentazione: docs.google.com/presentation DoSer Python Tool usage: mydoserget.py -h -t THREADS -u U...

zi

❮ Zi ❯ 🧙‍♂️ 🪄 A Swiss Army Knife for Zsh - Unix Shell ✨ 《 Report an issue · 《 Request a Feature 》 · 《 Ask a Question 》 --- 《💡》Search Wiki 《⚡️》 Install 《💜》Join 《🌐》Localize 🎯 Roadmap Generally, new features will be introduced as a component to improve performance and compatibility and not to force,...

reconmap

Reconmap Pentesting Management, Automation and Reporting Platform Reconmap is an open source vulnerability assessment and penetration testing platform designed to support security professionals throughout the entire engagement lifecycle. It enables penetration testers and InfoSec teams to...

CVE-2024-27564

CVE-2024-27564 Description: A vulnerability in pictureproxy.php allows remote attackers to perform arbitrary requests by injecting URLs into the url parameter. This SSRF vulnerability can be exploited without authentication, making it particularly dangerous. The vulnerable code is in the...

templates

Report Templates Directory Structure notes: Script generate-directories.py grabs the current latest version of the VRT structure from GitHub and creates any missing directories. Does not remove or rename directories based on items removed from VRT. Script follows standard entry names and keeps...

graphql-threat-matrix

GraphQL Threat Matrix Why graphql-threat-matrix? graphql-threat-matrix was built for bug bounty hunters, security researchers and hackers to assist with uncovering vulnerabilities across multiple GraphQL implementations. The differences in how GraphQL implementations interpret and conform to the...

slowloris

slowloris.py - Simple slowloris in Python What is Slowloris? Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this: 1. We start making lots of HTTP requests. 2. We send headers periodically every 15 seconds to keep the connections open. 3. We...

CVE-2022-29056

CVE-2022-29056 Exploit Automation For Educational Purposes 🚨 📌 Description This is a Python script with a graphical interface Tkinter that allows the user to test automated request submissions to a login endpoint. The goal is to simulate how servers respond to different payload sizes and analyze...

CVE-2018-6389

doser.py DoS tool for HTTP requests inspired by hulk but has more functionalities written in Python: Examples 999 threads sends GET requests: python doser.py -t 999 -g 'https://targeted.site.com' 999 threads sends POST requests with json data: python doser.py -t 999 -p 'https://targeted.site.com'...

probequest

========== ProbeQuest |PyPI Package| |PyPI Downloads| |PyPI Python Versions| |Build Status| |LGTM Grade| |LGTM Alerts| |Documentation Status| Toolkit allowing to sniff and display the Wi-Fi probe requests passing nearby your wireless interface. Probe requests are sent by a station to elicit...

ReverseHttp

ReverseHttp Python backdoor that uses http post/get requests to communicate Requirement Python 2.7 Cherrypy pip install cherrypy Requests pip install requests Usage: Fireup the listener script then the controller then send the backdoor file and wait for connections Screenshot...

CVE-2025-0108

CVE-2025-0108 - PAN-OS PoC SCRIPT /!\ Disclaimer: This script is provided 'as is' and exclusively for educational purposes. Users are strongly advised to exercise caution and utilize it within the boundaries of legal and ethical considerations. Description Python vulnerability scanner designed to...

strelka

Releasesrelease | Documentationwiki | Pull Requestspr | Issuesissues !GitHub releaseimg-version-badgerepo !Build Statusimg-actions-badgeactions-ci !Pull Requestsimg-pr-badgepr !Slackimg-slack-badgeslack !Licenseimg-license-badgelicense Strelka is a real-time, container-based file scanning system...

CVE-2023-26208

CVE-2023-26208 Exploit Automation For Educational Purposes 🚨 📌 Description This is a Python script with a graphical interface Tkinter that allows the user to test automated request submissions to a login endpoint. The goal is to simulate how servers respond to different payload sizes and analyze...

yara

!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...

Snoopy

| || | | || || || || | | | | || || || || || || || | | | | || | | || | | || || || | | || || || || || || || | | || | | || || || | | | |||| |||||||| || V0.1 "Amy, technology isn't intrinsically good or evil. It's how it's used. Like the Death Ray." -Professor Farnsworth Welcome to Snoopy; a...

dnssearch

dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...

CVE-2022-24816

Uso del script CVE-2022-24816 Requisitos previos 1. Clonar el repositorio : git clone https://github.com/c1ph3rbyt3/CVE-2022-24816.git cd CVE-2022-24816 2. Instalar las dependencias : Asegúrate de tener Python 3 instalado. Luego, instala las dependencias necesarias ejecutando: pip install -r...

phpstress

phpstress Night Lion Security proof of concept denial of service / stress tester for PHP websites running with Apache and NGINX systems PHP-FPM and PHP-CGI Using a standard cable/DSL connection, this attack can flood a Linux web server’s CPU and RAM using standard HTTP requests. This attack effec...

zap-scripts

zap-scripts Zed Attack Proxy Scripts for finding CVEs and Secrets. Building This project uses Gradle to build the ZAP add-on, simply run: ./gradlew build in the main directory of the project, the add-on will be placed in the directory build/zapAddOn/bin/. Usage The easiest way to use this repo in...