CVE-2023-22809-sudoedit-privesc

CVE-2023-22809 sudo Privilege escalation Affected sudo versions: 1.8.0 to 1.9.12p1 This script automates the exploitation of the CVE-2023-22809 vulnerability to gain a root shell. The script checks if the current user has access to run the sudoedit or sudo -e command for some file with root...

RastLeak

RastLeak Tool to automatic leak information using Hacking with engine searches Google and Bing. How to install git clone https://github.com/n4xh4ck5/RastLeak.git Install dependencies with pip: pip install -r requirements.txt To install wget: sudo pip install wget Version The last stable version i...

Octopus

What is Octopus ? Octopus is an open source, pre-operation C2 server based on python which can control an Octopus powershell agent through HTTP/S. The main purpose of creating Octopus is for use before any red team operation, where rather than starting the engagement with your full operational...

CVE-2021-21985

CVE202121985 Description This script check the CVE-2021-21985 vulnerability and patch on vCenter Server. Requirements Python3 Python3 Standard Library Installation git clone https://github.com/mauricelambert/CVE202121985.git ./ Example To check IP 10.0.0.2, 10.0.0.3 and hostname vCenter3: python3...

WeblogicScan

WeblogicScan Enhanced version of WeblogicScan, modified from rabbitmask's WeblogicScan V1.2. Original source project: https://github.com/rabbitmask/WeblogicScan DEFF Supports Python3 Fixed vulnerability detection false positives, vulnerability detection results are more accurate Added...

Log4Shell-Scanner

Log4Shell-Scanner Python script to detect Log4Shell Vulnerability CVE-2021-44228...

CVE-2026-8069

From an Acer Named Pipe to NT AUTHORITY\SYSTEM: CVE-2026-8069 Acer NitroSense and PredatorSense 3.x installed a Windows service called PSSvc that exposed a custom named-pipe protocol to local users. One protocol command accepted a caller-controlled executable path, duplicated the token of...

CVE-2026-73315

CVE-2026-73315: SSRF through PayPal certificate URL XenForo before 2.3.13 fetches the certificate URL supplied by a PayPal REST webhook without restricting its destination. What happens The callback handler passes PAYPAL-CERT-URL to XenForo's trusted HTTP reader. It does not require a PayPal...

Project-Exploiting-CVE-2024-27198-RCE-Vulnerability

Exploiting CVE-2024-27198-RCE Vulnerability In this project, I exploited the CVE-2024-27198-RCE vulnerability to perform a remote code execution RCE attack on a vulnerable TeamCity server. The vulnerability allows uploading and activating a malicious plugin that provides access to the remote syst...

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2

SMB-PenTest-Exploiting-CVE-2007-2447-on-Metasploitable-2 RedTeam-SMB-PenTest | ---|--- Description This project documents my penetration testing engagement as part of the CMIT 386 course at UMGC. It focuses on exploiting the Samba SMB usermapscript vulnerability CVE-2007-2447 on Metasploitable 2...

EmBomber

EmBomber Python Script for Email Bombing which supports Gmail, Yahoo, Hotmail/Outlook Made with by Mazen Elzanaty Features Support Gmail Support Yahoo Support Hotmail/Outlook Usage EmBomber should work on all Linux distros running Python 2.7 First, clone it by entering the following command in th...

CVE-2026-83548-CVE-2026-83549

CVE-2026-83548, CVE-2026-83549 Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ Ten percent of every donation is...

dumpulator

dumpulator Note: This is a work-in-progress prototype, please treat it as such. Pull requests are welcome! You can get your feet wet withgood first issues An easy-to-use library for emulating code in minidump files. Here are some links to posts/videos using dumpulator: Introduction video with...

MaliciousMacroGenerator

Malicious Macro Generator Utility Simple utility design to generate obfuscated macro that also include a AV / Sandboxes escape mechanism. Requirement Python 2.7 Usage MMG.Malicious Macro Generator v2.0 - RingZer0 Team Author: Mr.Un1k0d3r [email protected] Usage: MMG.py config output optional...

Zin

Version 1.0 😎 Zin 😎 A Payload Injector for bugbounties written in go Features Inject multiple payloads into all parameters Inject single payloads into all parameters Saves responses into output folder Displays Status Code & Response Length Can grep for patterns in the response Really fast Easy to...

powershell-backdoor-generator

/ DISCLAIMER: This program is intended for educational purposes only. By using this program, you agree that you understand the potential risks associated with its use. - This program should not be used on any system or network without proper authorization. Unauthorized use is strictly prohibited....

CVE-2026-73311

CVE-2026-73311: OAuth2 authorization code replay XenForo before 2.3.13 allows an OAuth2 authorization code to be redeemed more than once. What happens The authorization-code grant loads a code, verifies its time-based validity, and creates a token pair. The successful path does not delete the cod...

Project-NTLM-Hash-Capture-and-Phishing-Email-Exploitation-for-CVE-2024-21413

Project Goal: The project was created to demonstrate the use of various tools for capturing NTLM hashes from users on a network and for executing phishing attacks using email. This showcases how network authentication vulnerabilities and phishing methods can be exploited to compromise systems...

CVE-2021-1675-PrintNightmare

CVE-2021-1675-PrintNightmare Working PowerShell POC Powershell script is copied from https://github.com/calebstewart/CVE-2021-1675 Respect for Caleb Stewart and John Hammond. I just wanted to have working poc close at hand. Ive added my custom DLL and an obfuscated version of powershell script...

dcpwn

dcpwn an impacket-dependent script exploiting CVE-2019-1040, with code partly borrowed from those security researchers that I'd like to say thanks to. by taking a closer look you'll find the very technique for utilising the vulnerability slightly different to what common belief is...