Grafana-8.3-Directory-Traversal

CVE-2021-43798 Python script Description: Grafana 8.3.0 Directory Traversal Try this if EDB-ID 50581 is not working! Original Article: https://ethicalhacking.uk/cve-2021-43798-dissecting-the-grafana-path-traversal-vulnerability/gsc.tab=0 During a box in OffSec Proving Ground Fanatastic, I...

CVE-2023-0297

CVE-2023-0297 RCE in pyload prior to 0.5.0b3.dev31. Disclaimer: This script lead to unauthorized access or control of a remote system; only use it if you have explicit permission from the system owner before proceeding...

-Ruby-dl-handle.c-CVE-2009-5147-

Ruby Advisory Database The Ruby Advisory Database is a community effort to compile all security advisories that are relevant to Ruby libraries. You can check your own Gemfile.locks against this database by using bundler-audit. Support Ruby security! Do you know about a vulnerability that isn't...

dorkX

dorkX Pipe different tools with google dork Scanner Version 1.0 Install zoid@MSI /dorkX git clone https://github.com/ethicalhackingplayground/dorkX zoid@MSI /dorkX cd dorkX zoid@MSI /dorkX go build dorkx.go zoid@MSI /dorkX go build corsx.go zoid@MSI /dorkX go build csrfx.go zoid@MSI /dorkX go bui...

AnonHik

AnonHik Python script to get image from Hikvision camera with CVE-2017-7921 vulnerability Demo: Alt Text...

PPLBlade

PPLBlade Protected Process Dumper Tool that support obfuscating memory dump and transferring it on remote workstations without dropping it onto the disk. Key functionalities : 1. Bypassing PPL protection 2. Obfuscating memory dump files to evade Defender signature-based detection mechanisms 3...

jenkinsci__perfecto-plugin_CVE-2020-2261_1-17

Perfecto Jenkins Plugin Perfecto Jenkins Plugin provides the ability to auto-create/ re-use existing Perfecto Connect tunnel-id in build environment. Table of Contents Perfecto Jenkins Plugin Table of Contents Prerequisites 1. Steps to Enable the plugin Screenshots Mac Windows Advanced Options 2...

CVE-2021-21985

CVE202121985 Description This script check the CVE-2021-21985 vulnerability and patch on vCenter Server. Requirements Python3 Python3 Standard Library Installation git clone https://github.com/mauricelambert/CVE202121985.git ./ Example To check IP 10.0.0.2, 10.0.0.3 and hostname vCenter3: python3...

XXRF-Shots

What is SSRF vulnerability? Server Side Request Forgery SSRF is a type of vulnerability that enables attackers to send specially crafted requests through a vulnerable web application. With this technique, attackers can gain unauthorized access to internal resources behind a firewall, which would...

mscache

mscache a tool to manipulate dccdomain cached credentials in windows registry, based mainly on the work of mimikatz and impacket requirements python2 pycrypto passlib impacket example python mscache.py --security security --system system dumping domain cached credentials reg query...

N4xD0rk

N4xD0rk Listing subdomains about a main domain using the technique called Hacking with search engines. Instalation You can download the latest version of N4xD0rk by cloning the GitHub repository: git clone https://github.com/n4xh4ck5/N4xD0rk.git Install the dependencies via pip: pip install -r...

of-CORS

of-CORS of-CORS is Truffle Security's tool suite for identifying and exploiting CORS misconfigurations on the internal networks of bug bounty targets using typosquatting. You can read more here https://trufflesecurity.com/blog/of-CORS How Does it Work?? of-CORS is a Python3 web application built ...

-CVE-2011-2523

-CVE-2011-2523 This is a python3 script to exploit the CVE-2011-2523, the VSFTPD 2.3.4 Backdoor Command Execution, using socket and telnetlib modules How to install ? Install dependencies : pip3 install termcolor argparse Git cloning the project git clone...

CVE-2026-101894

CVE-2026-101894 — @xhmikosr/decompress symlink-chain path traversal Python 3 PoC for CVE-2026-101894 — Node.js archive extraction in @xhmikosr/decompress and unmaintained decompress allows read/write outside the output directory via a chain of symlink entries. Bypass of CVE-2026-53486 hardening...

AD_Enumeration_Hunt

ADEnumerationHunt Description Welcome to the AD Pentesting Toolkit! This repository contains a collection of PowerShell scripts and commands that can be used for Active Directory AD penetration testing and security assessment. The scripts cover various aspects of AD enumeration, user and group...

CVE-2025-32023

CVE-2025-32023 Remote Code Execution in Redis HyperLogLog Operations Vulnerability Summary CVE-2025-32023 is a remote code execution RCE vulnerability in the Redis database, specifically affecting the handling of HyperLogLog data structure operations. This flaw allows an authenticated user to...

corsair_scan

Welcome to Corsairscan Corsairscan is a security tool to test Cross-Origin Resource Sharing CORS misconfigurations. CORS is a mechanism that allows restricted resources on a web page to be requested from another domain outside the domain from which the first resource was served. If this is not...

sysmon-config

sysmon-config | A Sysmon configuration file This is a forked and modified version of @SwiftOnSecurity's sysmon config. It started as a is simply copy of the original repository. We merged most of the 30+ open pull requests. Thus we have fixed many of the issues that are still present in the...

Sojobo

Sojobo - A binary analysis framework Sojobo is an emulator for the B2R2 framework. It was created to easier the analysis of potentially malicious files. It is totally developed in .NET so you don't need to install or compile any other external libraries the project is self contained. With Sojobo...

CVE-2024-42448-RCE

CVE-2024-42448-RCE Veeam Service Provider Console VSPC remote code execution. Download link here Details: is a critical vulnerability identified in the Veeam Service Provider Console VSPC with a CVSS score of 9.9. This vulnerability allows for remote code execution RCE. About: files.zip here you'...