kali-preseed-examples

Kali Preseed Examples Debian preseed files are useful tools to automate installation and configuration of a Debian-based distribution. Kali is able to utilize these to speedup installations with a hands-off, customized, consistent installation. For much more info on preseed files, please consult...

BEAR-C2

BEAR-C2 Framework BEAR-C2 is an adversary simulation and emulation framework built around real world TTPs inspired by Russian, Chinese, North Korean, and Iranian APT groups. It provides a flexible environment for diverse engagement scenarios and delivers a realistic foundation for red team...

JSFScan.sh

JSFScan.sh Blog can be found at https://medium.com/@patelkathan22/beginners-guide-on-how-you-can-use-javascript-in-bugbounty-492f6eb1f9ea?sk=21500dc4288281c7e6ed2315943269e7 Script made for all your javascript recon automation in bugbounty. Just pass subdomain list to it and options according to...

wifisting

wifisting A GTK4 wireless security toolkit for Linux. 57 modules covering Wi-Fi, Bluetooth, RF, router-side and network MITM work behind one interface. Every module is a standalone shell script. The GUI is a view over them, not a container — nothing is locked behind the interface. Early...

iocextract

iocextract Indicator of Compromise IOC extractor for some of the most commonly ingested artifacts. Table of contents Overview The Problem Our Solution Example Use Case Installation Usage Library Command Line Interface Helpful Information FAQ More Details Custom Regex Related Projects Contributing...

CVE-2026-31431-Verificador-Exploit

CVE-2026-31431 - Linux Kernel Privilege Escalation Exploit Description Functional exploit for the CVE-2026-31431 vulnerability that allows local privilege escalation on Linux systems by exploiting a flaw in the kernel's AFALG cryptographic subsystem combined with the splice system call. Features...

CVE-2026-2058-PoC

CVE-2026-2058-PoC – CloudClassroom PHP Project SQL Injection Overview A SQL Injection vulnerability exists in the Post Query functionality of the CloudClassroom PHP Project v1.0. The vulnerability allows attackers to inject arbitrary SQL commands via the squeryx POST parameter, leading to databas...

CVE-2017-11610

Supervisord Remote Command Execution Vulnerability Script CVE-2017-11610 Vulnerability Overview Supervisor is a process management tool written in Python, which can be used to start, restart auto-restart programs, and stop processes not just Python processes on UNIX-like systems Windows is not...

CVE-2025-54100

CVE-2025-54100 – PowerShell Response Parsing PoC A concise Proof-of-Concept showing how CVE-2025-54100 can lead to Remote Code Execution RCE in Windows PowerShell 5.1 through malicious HTML parsing. Table of Contents What is CVE-2025-54100? How the PoC Works Quick Start Triggering From a Victim...

CVE-2025-0108

Save this script as paloaltocve20250108.nse, then run the following Nmap command: nmap --script paloaltocve20250108.nse -p 80,443 or for a list of targets: nmap --script paloaltocve20250108.nse -p 80,443 -iL targets.txt...

CVE-2024-48217

CVE-2024-48217 Sismart Vulnerability CVE Assigned: CVE-2024-48217 mitre.org nvd.nist.org tenable.com Date: 5 September 2024 Author: Ajriel Rizqy Maulana Software Link: SiSMART Aplikasi Pintar Penunjang Proses Pendidikan - 7.4.0 SiSMART Aplikasi Pintar Penunjang Proses Pendidikan API Version: 7.4....

CredPhish

CredPhish is a PowerShell script designed to invoke credential prompts and exfiltrate passwords. It relies on CredentialPicker to collect user passwords, Resolve-DnsName for DNS exfiltration, and Windows Defender's ConfigSecurityPolicy.exe to perform arbitrary GET requests. For a walkthrough, see...

CVE-2026-32202

PoC python3 CVE-2026-32202.py -h usage: CVE-2026-32202.py -h --unc PATH --out FILE --applet-id INT --name STR --infotip STR --no-dump Generate a test LNK file with an IDCONTROLW structure. Research tool for CVE-2026-21510 / CVE-2026-32202 patch analysis. options: -h, --help show this help message...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

CVE-2024-36842-Backdooring-Oncord-Android-Sterio-

CVE-2024-36842 Backdooring-Oncord+ Android-Sterio We have conducted vulnerablity assessment on one of the most selling after marrket car infotainment unit. Creating Persistent Backdoor on Oncord+ android/ios car infotainment unit using malicious script! About Device: Android version : 12 Kernel...

FUD-UUID-Shellcode

FUD-UUID-Shellcode Introduction Another shellcode injection technique using C++ that attempts to bypass Windows Defender using XOR encryption sorcery and UUID strings madness :. How it works Shellcode generation Firstly, generate a payload in binary format using either Havoc, CobaltStrike or...

captaincredz

CaptainCredz TL;DR CaptainCredz is a modular and discreet password-spraying tool, with advanced features such as a cache mechanism and a fine-grained timing control. To start using captaincredz, the following lines may be useful: TEXTEDITOR=nano git clone https://github.com/synacktiv/captaincredz...

https-github.com-xaitax-CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-21413, a significant security vulnerability discovered in Microsoft Outlook with a CVSS of 9.8. Termed the MonikerLink bug, this vulnerability has...

CVE-2025-26318

TSplus Remote Access - CVE-2025-26318 Insecure Permissions Information Disclosure 📌 Description TSplus is, by default, vulnerable to the disclosure of information from users currently connected to the domain on TSplus. 🔍 Vulnerability Details CVE ID : CVE-2025-26318 Vendor : TSplus Affected...

pentest-a2p2v-core

README Automated Attack Path Planning and Validation A2P2V is a planning and cyber-attack tool that provides the capability for users to determine a set of ranked attack sequences given a specific attacker goal. The aim of the tool is to simplify process so that non-security experts can generate...