hedgehog-tools

hedgehog-tools Repo of smaller scripts for malware analysis, deobfuscation and configuration extraction. See README.md files within the folders for more details. Overview of generic tools Folder| Script| Depends| Static| Purpose ---|---|---|---|--- ECMAScript helpers| extractcalledfunctions.js|...

SnafflerParser

Snaffler Output File Parser Especially in large environments, the Snaffler output gets very large and time-consuming to analyze. This script parses the Snaffler output file TSV format required and: Beautifies results into readable tables and exports to TXT, CSV, HTML, JSON or PS Gridview. Generat...

pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function

A flaw was found in the pacote component. A remote attacker can exploit this denial of service DoS vulnerability by providing a specially crafted input to the addGitSha function. This malicious input triggers excessive CPU consumption due to regex replacement and string manipulation, which can le...

bugbounty_tools

bugbountytools Collection of scripts and tools used during bug bounty work. This will be the location of my automation scripts created for my own personal use, and occassionally public released Contact: For questions, comments or request make a psot to my X account not in DM and I will do what I...

CVE-2023-30459

CVE-2023-30459 SmartPTT SCADA 1.1.0.0 allows remote code execution when the attacker has administrator privileges by writing a malicious C script and executing it on the server via server settings in the administrator control panel on port 8101, by default. How to use: python CVE-2023-30459.py -t...

PortDog

PortDog PortDog is a network anomaly detector aimed to detect port scanning techniques. It is entirely written in python and has easy-to-use interface. It was tested on Ubuntu 15. Please note that, it is not working on Windows OS due to suffering from capturing RAW packets.I am working on to writ...

Envoy-CPU-Exhaustion-Vulnerability-PoC

Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...

CVE-2022-24497

CVE-2022-24497 A Zeek detector for CVE-2022-24497: https://vulners.com/cve/CVE-2022-24497 Example notices from the testing PCAP: separator \x09 setseparator , emptyfield empty unsetfield - path notice open 2022-04-13-21-45-25 fields ts uid id.origh id.origp id.resph id.respp fuid filemimetype...

SILVERPICK

SILVERPICK VERSION v1.1 BRIEF Project SILVERPICK is a Windows User-Mode Shellcode Development Framework WUMSDF whose sole purpose is to empower capability developers to build Position Independent Code PIC blobs for Windows x64 using C/C++ in an easy manner so as to reduce the development costs of...

linkedin-extension-fingerprinting

LinkedIn Chrome Extension Fingerprinting LinkedIn silently probes for 2,953 Chrome extensions on every page load. Background This repository documents every extension LinkedIn checks for and provides tools to identify them. Data The complete list of extensions with names and Chrome Web Store link...

EnumJavaLibs

EnumJavaLibs EnumJavaLibs: Remote Java classpath enumeration via deserialization. Overview EnumJavaLibs can be used to discover which libraries are loaded i.e. available on the classpath by a remote Java application when it supports deserialization. ----------------- Serially - v1.1 by Stefan...

CVE-2024-55555

Laravel Crypto Killer Mass Scanner CVE-2024-55555 This script performs a mass scan of Laravel-based applications vulnerable to CVE-2024-55555, an unauthenticated remote code execution RCE vulnerability in Invoice Ninja. It automates the process of detecting sites using weak or known APPKEY values...

Pegasus---Forbidden-Buster

Pegasus - Forbidden Buster Author: Letda Kes dr. Sobri, S.Kom. A penetration testing tool for bypassing HTTP 401/403 responses using various header manipulation techniques and path fuzzing. Features Tests various header manipulations X-Forwarded-For, X-Original-URL, X-Rewrite-URL, etc. Unicode pa...

CVE-2025-56771

Description During analysis of the ecodotempo.com.br website, a Stored Cross-Site Scripting XSS vulnerability was discovered. This vulnerability allows an attacker to inject malicious scripts into fields that are subsequently rendered to other users without proper sanitization, specifically on th...

CVE-2020-3452

CVE-2020-3452 Little, stupid python validator? for CVE-2020-3452 on CISCO devices. Python first timer, pls do not kill me. ;- USAGE python CVE-2020-3452.py /path/to/input/file.txt /path/to/output/file.txt DISCLAIMER: Please use this script only on subjects you own or you have the permission to te...

exploit-mikrotik-2026

CVE-2026-67276 - MikroTrik SSH Authentication Bypass Exploit MikroTik RouterOS SSH Public Key Authentication Bypass - No Private Key Required A proof-of-concept exploit for CVE-2026-67276 MikroTrick, a critical authentication bypass vulnerability in MikroTik RouterOS SSH implementation that allow...

sdwan-harvester

SD-WAN Harvester 🌐 SD-WAN Internet Census Framework Disclaimer This project is no longer maintained. It is stable and you still can use it for SD-WAN scanning, but currently, more preferable and accurate way to scan different things on the internet not only SD-WAN solutions is to use our new...

CVE-2026-76071

CVE-2026-76071: Unauthenticated Pre-Auth Stack Buffer Overflow via sscanf %^, in skkset.cgi ipFilterList Handler in Netis NC63 Researcher: Özcan Ersan @ozcanpng Disclosure status CVE: CVE-2026-76071 Vendor: Netis Systems Co., Ltd. Product: Netis NC63 AC1200 Wireless Dual Band Gigabit MU-MIMO Rout...

xcrawl3r

xcrawl3r xcrawl3r is a command-line utility designed to recursively spider webpages for URLs. It works by actively traversing websites - following links embedded in webpages, and parsing files including sitemaps & robots.txt - to uncover every URL. Unlike xurlfind3r that doesn't interact directly...

CVE-2024-34470

HSC MailInspector - CVE-2024-34470 A critical vulnerability has been found in HSC Mailinspector up to version 5.2.18. This vulnerability affects an unknown functionality of the file /public/loader.php. Manipulating the 'path' argument with an unknown input leads to a path traversal vulnerability...