invoke-antivm

Invoke-AntiVM v1.0 Introduction Invoke-AntiVM is a set of modules to perform VM detection and fingerprinting with exfiltration via Powershell. Compatibility Run the script check-compatibility.ps1 to check what modules or functions are compatibile with the powershell version. Our goal is to achiev...

sub.Monitor

sub.Monitor Fast & user-friendly subdomain monitoring tool for continous attack surface management. Why? Why opt for sub.Monitor? This program offers easy setup due to its utilization of SQLite for storing all identified domains removing the necessity for prior database management. Moreover, it...

cloudrasp-log4j2

CloudArmor · Runtime Application Self-Protection Module - Log4j2 Version 简体中文 This project is a local version from CloudArmor specifically built for defending Log4j2 CVE-2021-44228 . No network connection is required to run this project. Please DO TESTING before deploying it to production...

ShonyDanza

ShonyDanza A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan. With ShonyDanza, you can: Obtain IPs based on search criteria Automatically exclude honeypots from the results based on your pre-configured thresholds Pre-configure all IP search...

urlgrab

Welcome to urlgrab 👋 A golang utility to spider through a website searching for additional links with support for JavaScript rendering. Install go get -u github.com/iamstoxe/urlgrab Features Customizable Parallelism Ability to Render JavaScript including Single Page Applications such as Angular a...

CVE-2020-12800

CVE-2020-12800 POC Script for CVE-2020-12800: RCE through Unrestricted File Type Upload Vulnerable plugin for testing hosted at: https://mega.nz/file/aQUClQKCZYeiTYSrPuRnwwlRavy4cqfEXs34Tkq6KQig2RcOas Pentester Academy lab...

CVE-2019-19781

CVE-2019-19781 Remote Code Execution RCE in Citrix Application Delivery Controller and Citrix Gateway A vulnerability has been identified in Citrix Application Delivery Controller ADC formerly known as NetScaler ADC and Citrix Gateway formerly known as NetScaler Gateway that, if exploited, could...

CVE-2025-45346

CVE-2025-45346 – Bacula-Web Time-Based SQL Injection PostgreSQL Version Extraction 📝 Overview Vulnerability Title : Time-Based Blind SQL Injection in Bacula-Web Product : Bacula-Web Versions Affected : Confirmed in versions supporting PostgreSQL backend CVE ID : CVE-2025-45346 Severity : High...

CVE-2023-42793

TeamCity CVE-2023-42793 Exploit This Python script exploits a security vulnerability CVE-2023-42793 in JetBrains TeamCity, allowing an attacker to create a new user with administrative privileges. Usage The script takes either a single TeamCity instance URL or a list of URLs as input. The provide...

Nosql-Exploitation-Framework

Nosql-Exploitation-Framework A FrameWork For NoSQL Scanning and Exploitation Framework NoSQL Exploitation Framework 2.02b Released Author NoSQL Exploitation Framework Authored By Francis Alexander Wiki NoSQL Exploitation Framework Wiki on Installation & Usage -...

Fastjson--CVE-2017-18349-

Fastjson--CVE-2017-18349-Cancel changes After setting the project as a Maven project, run note: using a higher version of JDK may fail, it is recommended to use JDK version 1.8.65 Just run the main function of FastjsondemoApplication.java TouchFile.java file import java.lang.Runtime; import...

PowEnum

PowEnum Penetration testers commonly enumerate AD data – providing domain situational awareness and helping to identify soft targets. PowEnum helps automate the cartological view of your target domain. PowEnum executes common PowerSploit Powerview functions and combines the output into a...

metasploit-pentest-report

Authorized Penetration Test: Metasploit Lab Scope and Authorization All targets used in this project are explicitly authorized: Target| IP| Authorization Basis ---|---|--- Metasploitable2| 192.168.3.130| Self-hosted VM on isolated host-only network. Intentionally vulnerable VM built for security...

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 File Upload Vulnerability Analysis Vulnerability Location Vulnerability Location: ht-contactform/admin/Includes/Services/FileManager.php Key Function: tempfileupload 1. Main Vulnerability Point: tempfileupload function Line 63 public function...

CVE-2024-27766

CVE-2024-27766 MariaDB v11.1 RCE via UDF — modified PoC based on Ant1sec-ops/CVE-2024-27766. Overview | ---|--- Affected| MariaDB v11.1 Fixed in| 10.5.25 / 10.6.18 / 10.11.8 / 11.0.6 / 11.1.5 / 11.2.4 / 11.4.2+ Type| RCE via User-Defined Function UDF MariaDB v11.1 allows an attacker with sufficie...

CVE-2024-6387

CVE-2024-6387 - PoC 📜 Description Note: This script is a quick prototype PoC, expect some errors and bugs may occur. Tested on: Kali Linux, ParrotSec, Ubuntu 22.04 Remote Unauthenticated Code Execution Vulnerability in OpenSSH server A signal handler race condition was found in OpenSSH's server...

sonarcloud-scan

Bitbucket Pipelines Pipe: SonarQube Cloud scan Scan your code with SonarQube Cloud to detects bugs, vulnerabilities and code smells in more than 25 programming languages. Your SonarCloud account must first be associated to your Bitbucket team or user account. SonarQube Cloud is totally free for...

GoogleIndexRetriever

Google index Retriever Have you ever found a webpage that seems to talk exactly about what you need, but it has been removed? Yes, Google cache is the answer but... What if the cache has been removed too? What if the site is just in Google Index page? You can not get the webpage back, but you kno...

CVE-2018-14665

CVE-2018-14665 0x00 Introduction Indian security researcher Narendra Shinde discovered a high-risk vulnerability CVE-2018-14665 in the X.Org Server package that allows a regular account to escalate privileges to root. It affects major Linux distributions including OpenBSD, Debian, Ubuntu, CentOS,...

cotonti-commentswidget-poc

Cotonti CommentsWidget PHP Object Injection PoC Safe local proof of concept for the PHP object injection issue identified in Cotonti's CommentsWidget implementation. Vulnerability Project: Cotonti Affected component: plugins/comments/inc/CommentsWidget.php CWE: CWE-502 — Deserialization of...