CVE-2021-41773-PoC

CVE-2021-41773-PoC 🚀 Mode Of Use ./exploit.sh 172.17.0.2 id uid=33www-data gid=33www-data groups=33www-data !CAUTION Este script es SOLO para fines educativos y de pentesting autorizado. El uso indebido de esta herramienta en sistemas sin permiso expreso es ILEGAL. El autor no se hace responsable...

MobSF_AI

MobSF AI Sidecar This project adds an AI-powered chat assistant to the Mobile Security Framework MobSF. It allows security analysts to ask questions about the analysis report generated by MobSF directly within the interface, leveraging OpenAI's model. Features Seamless Integration : Injects a...

apache__dubbo_CVE-2021-30180_2-7-9

Apache Dubbo Project Apache Dubbo is a high-performance, Java-based open-source RPC framework. Please visit official site for quick start and documentations, as well as the wiki for news, FAQ, and release notes. We are now collecting Dubbo user info to help us to improve Dubbo further. Kindly...

Check-for-CVE-2023-32629-GameOver-lay

Check for CVE-2023-32629 GameOverlay Script Overview: The script is designed to perform security checks on an Ubuntu system to detect vulnerabilities related to the GameOverlay flaws. It checks for two specific vulnerabilities, CVE-2023-2640 and CVE-2023-32629, which are present in the Linux...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ !WARNING Gitleaks is feature complete. I'm not merging new features into Gitleaks. Future releases will be security patches only. I'm shifting my focus to Betterleaks Gitleaks is a tool for detecting secrets like passwords, API keys, and tokens in g...

elfxtract

ELFXtract ELFXtract is an automated analysis tool used for enumerating ELF binaries Powered by Radare2 and r2ghidra This is specially developed for PWN challenges and it has many automated features It almost displays every details of the ELF and also decompiles its ASM to C code using r2ghidra...

BTLE

BTLE BTLE is a free and open-source Bluetooth Low Energy BLE Software Defined Radio software suite and open BTLE chip design. It includes: BTLE baseband algorithms description, Python and Verilog implementation, FPGA and SkyWater 130 PDK OpenLane2 workflow results. Analog Devices AD9361 + Xilinx...

Privilege-Escalation

⬆️ Privilege Escalation for Pentesters A practical Privilege Escalation cheat sheet and reference guide designed for CTF players, penetration testers, and cybersecurity learners to understand how attackers escalate privileges on compromised systems 🌐 Connect With Us 🔵 Telegram – Join Channel ⚫...

CVE-2021-44228-Log4j-lookup-Rce

0x01、Environment Jdk7u21 any version works Affected versions: Apache Log4j 2.x org.apache.logging.log4j log4j-core 2.11.1 Poc import org.apache.logging.log4j.LogManager; import org.apache.logging.log4j.Logger; public class test2 private static Logger LOGGER = LogManager.getLogger; public static...

evil-twin-ap

Evil Twin Access Point Toolkit A complete, modular, and reproducible evil twin access point setup for defensive security testing, penetration testing, and wireless security research. ⚠️ Legal Disclaimer FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY This tool is provided for: Educational...

Bryobio

Bryobio🕷️ NETWORK Pcap File Analysis It was developed to speed up the processes of SOC Analysts during analysis🕷️ This tool is valuable for cybersecurity professionals, particularly in analyzing and understanding network traffic and potential security threats. The provided illustration reflects the...

SMBCrunch

SMBCrunch One of the most time consuming tasks as a red teamer is diving into filesystems and shares, attempting to identify any potentially sensitive information. SMBCrunch allows a red teamer to quickly identify Windows File Shares in a network, performs a recursive directory listing of the...

AuthMatrix

AuthMatrix v0.8.2 AuthMatrix is an extension to Burp Suite that provides a simple way to test authorization in web applications and web services. With AuthMatrix, testers focus on thoroughly defining tables of users, roles, and requests for their specific target application upfront. These tables...

CVE-2026-44578

CVE-2026-44578 — Next.js WebSocket Upgrade SSRF Pre-authentication Server-Side Request Forgery in Next.js self-hosted deployments. A single crafted HTTP request extracts AWS credentials, secrets, and internal service data from localhost:80. Field| Value ---|--- CVE| CVE-2026-44578 GHSA|...

LogHound

LogHound Post-Exploitation EVTX Analyzer for BloodHound Mapping LogHound collects and parses Windows Security Event Logs .evtx to extract authentication events, session data, and logon metadata for ingestion into BloodHound and for deeper adversarial telemetry. Reasoning & Overview LogHound was...

Cl0neMast3r

Cl0neMast3r About: Cl0neMast3r is a Python script that was coded to make your life easier. Now you can easily choose your favorite tools from GitHub and install them on your system with one click. Even better you can ensure that you have latest version of your favorite tools. All this and more yo...

CVE-2019-17240_Bludit-BF-Bypass

CVE-2019-17240 Exploit/PoC - Bludit Brute-force Mitigation Bypass Exploit Code for CVE-2019-17240 aka Bludit = 3.9.2 Bruteforce Mitigation Bypass Exploit Links: ExploitDB-48942 PacketStorm Expected outcome: Discover login credentials, bypassing Brute-force Mechanism on host running Bludit =3.9.2...

CVE-2020-9484

CVE-2020-9484 POC for CVE-2020-9484 POC for CVE-2020-9484 Apache Tomcat RCE by deserialization CVE-2020-9484 Explore the docs » Getting Started 1. Clone this repository, then you will be able to use CVE-2020-9484 and modify the source code if needed. 2. Download ysoserial jar 3. place both...

AutoRAN-public

🧠 AutoRAN: Automated Hijacking of Safety Reasoning in Large Reasoning Models AutoRAN is an automated Hijacking of Safety Reasoning that leverages less-aligned secondary auxiliary models to simulate reasoning traces, generate narrative prompts, and iteratively refine those prompts to bypass safety...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...