bypass-403

Bypass-403 A simple script just made for self use for bypassing 403 It can also be used to compare responses on verious conditions as shown in the below snap Usage ./bypass-403.sh https://example.com admin ./bypass-403.sh website-here path-here Features Use 24 known Bypasses for 403 with the help...

Spray

Spray A Password Spraying tool for Active Directory Credentials by Jacob WilkinGreenwolf Getting Started These instructions will show you the requirements for and how to use Spray. Prerequisites All requirements come preinstalled on Kali Linux, to run on other flavors or Mac just make sure curlow...

CVE-2024-57378

CVE-2024-57378 How does this detection method work? This Nuclei HTTP template checks a target URL and its /app/login page for the Wazuh web interface, extracts the wazuhVersion value with a regex, and confirms the page is accessible 200 status and actually a Wazuh UI via title and keyword match. ...

CVE-2025-59213

Microsoft Configuration Manager ConfigMgr / SCCM 2503 Unauthenticated SQL injection CVE-2025-59213 exploit This script exploits the CVE-2025-59213 vulnerability, which allows an unauthenticated attacker with network access to a Management Point to execute arbitrary SQL queries on the site databas...

e013

e013 A little VBScript that steal Wifi passwords from Windows Into the file WifiName.txt you can see the password of every saved wifi available on every windows computer that support VBscript ⚠️ Don't modify the script with notepad, use text editor like GNU Emacs, Vim, Atom, Vscode, Sublime text...

CVE-2023-35813-PoC

Sitecore Remote Code Execution Vulnerability CVE: 2023-35813 discovered by @mwulftange CVSS Score: 9.8 Severity: Critical This is the fantastic blog post from the researchers that found it: https://code-white.com/blog/exploiting-asp.net-templateparser-part-1/ Figure out what command you want to...

React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web

React2Shell CVE-2025-55182: The Deserialization Bug That Broke the Web ⚡ React2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables unauthenticated remote code execution across default React/Next.js setups. ⏩ TL;...

CVE-2019-11539

CVE-2019-11539 Original Discovery: Orange Tsai, Meh Chang Authors: Justin Wagner, Alyssa Herrera Thanks to: Orange, Meh Chang, Rich Warren, Alyssa, Mimir Vulnerability Description In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and...

Honeyd

Honeyd 1.6d Copyright c 2002 - 2007 Niels Provos [email protected] About Honeyd: Honeyd is a small daemon that creates virtual hosts on a network. The hosts can be configured to run arbitrary services, and their TCP personality can be adapted so that they appear to be running certain version...

CVE-2026-31431-CopyFail-static-ELF--POC

CVE-2026-31431: Copy Fail - 587-byte static ELF I did not find this bug. Credit goes to Xint Code / Theori. This repo is my take on making the exploit as small as possible - a hand-rolled x8664 ELF that does the full LPE in 587 bytes. No libc, no linker, no runtime. Just NASM and stubbornness. In...

kraken

Kraken is a simple cross-platform Yara scanner that can be built for Windows, Mac, FreeBSD and Linux. It is primarily intended for incident response, research and ad-hoc detections not for endpoint protection. Following are the core features: Scan running executables and memory of running process...

linset

Linset Is Not a Social Enginering Tool First of all, commented that this is a project for educational purposes that have served to me and hopefully others to be more in touch with the world of programming and Wireless. It is prohibited under any circumstances the use this tool in foregin Wireless...

react2shell-toolkit

Next.js RCE Assessment Toolkit A Python toolkit for validating and investigating CVE-2025-55182, also known as React2Shell , in authorized environments. The vulnerability affects React Server Components and can expose applications built with frameworks such as Next.js to unauthenticated remote co...

access-point

Fake Access Point Rogue open Wi-Fi AP for traffic capture in controlled environments. Uses hostapd native nl80211 AP mode + dnsmasq DHCP/DNS + iptables NAT toward an uplink interface. Requirements Linux, root. Wireless card with AP-mode support iw phy → Supported interface modes: ... AP. Packages...

CVE-2019-5786

CVE-2019-5786 Chrome 72.0.3626.119 stable FileReader UaF exploit for Windows 7 x86. This exploit uses site-isolation to brute-force the vulnerability. iframe.html is the wrapper script that loads the exploit, contained in the other files, repeatedly into an iframe. host iframe.html on one site an...

recox

Recox v2.0 RecoX is an incredibly versatile and powerful tool that is specifically designed to aid in the identification and classification of vulnerabilities within web applications. The script is able to detect vulnerabilities that are not typically included in the OWASP top ten vulnerabilities...

WhatWaf

WhatWaf? WhatWaf is an advanced firewall detection tool who's goal is to give you the idea of "There's a WAF?". WhatWaf works by detecting a firewall on a web application, and attempting to detect a bypass or two for said firewall, on the specified target. SIDE-NOTE: Any issue that is not the...

fb-phisher-python

Facebook Phishing Original Author : Arslan Mughal BY : arjunindia original repository : https://github.com/arslanmughal5566/facebookphishing About Script : With this script you can perform Facebook login credentials stealing with some social engineering skills. requirements : 1 : Python3.x 2 :...

esp32_esp8266_attacks

ESP32/ESP8266 Wi-Fi Attacks This repository is part of a research outcome from theASSET Research Group. This repository demonstrates 3 Wi-Fi attacks against the popular ESP32/8266 IoT devices: Zero PMK Installation CVE-2019-12587 - Hijacking ESP32/ESP8266 clients connected to enterprise networks;...

CVE-2025-32434

CVE-2025-32434: PyTorch RCE Vulnerability - PoC What is CVE-2025-32434? CVE-2025-32434 is a critical Remote Code Execution RCE vulnerability in PyTorch, a widely used Python library for deep learning and neural networks. The Core Problem The vulnerability exists in the torch.load function, even...