CVE-2025-61229

CVE-2025-61229 Description From the developer's blog: User-settable Before/After shell scripts run escalated, with SuperDuper's TCC Full Disk Access permissions. Since those shell scripts are referenced by the settings files for the copy or schedule, a malicious actor could modify those settings ...

CVE-2022-39197-RCE

CVE-2022-39197-RCE First This project was modified from @its-arun project https://github.com/its-arun/CVE-2022-39197 When I tested the script, I found that the frida script could not query the data in the normal order. The method of modifying the frida script to modify the process name. Thanks to...

msfconsole-termux

msfconsole-termux Как установить Metasploit-Table на Android Termux pkg update apt-get install curl wget -y wget https://raw.githubusercontent.com/jas502n/msfconsole-termux/master/metasploit.sh |chmod 777 metasploit.sh && ./metasploit.sh Пример msfconsole -q -x "use...

Solr_CVE-2019-17558

SolrCVE-2019-17558 использование: python3 SolrCVE-2019-17558.py url whoami...

cve-2023-2745

How to use Save the file as checkcve-2023-2745.py and give it execute permission: chmod +x checkcve-2023-2745.py Install the dependency once: python3 -m pip install requests Run: python3 checkcve-2023-2745.py https://example.com...

Malbait

Malbait Perl로 구현된 TCP/UDP 허니팟 프로그램 malbait용 README, 2/10/17 참고로 제 비트코인 주소는 3A7yuqBcPAcVEM59bNAVQdTCmkxRb5JRgE입니다. 대체 주소도 있습니다. 역시 BTC용입니다. 일부 비트코인 지갑이 특정 주소를 지원하지 않는다는 제보를 받았기 때문입니다: 1PEDKUiUTxGNJ3XTPfXCTAjpzVzX1VZAme malbait에 오신 것을 환영합니다. 한 번에 모든 것을 해결하는 간단한 Perl 허니팟입니다! 빠른 시작! 상업적 용도로는 이 프로그램을...

Heartexploit

Heartexploit Here is my new first exploit, this exploit attacks the HeartBleed vulnerability CVE-2014-0160, I hope you like it. This exploit only works on linux since part of it is made in languages not compatible with windows. The only command needed to start this application is: ./Heartexploit....

telegram-story-scraper

Telegram Story Scraper 📱 A Python script that allows you to automatically scrape and download stories from your Telegram friends using the Telethon library. The script continuously monitors and saves both photos and videos from stories, along with their metadata. TGSS - Main Interface Important...

steganographer

Steganographie en Python Ce script cachera des fichiers dans des images et enregistrera l'image modifiée sur le disque. La taille maximale du fichier pouvant être caché dans une image dépend des dimensions de l'image. maxfilesize = heightofimage widthofimage 6 / 8 bytes Le fichier '100k words.txt...

CVE-2023-41425-wonderCMS_RCE

CVE-2023-41425-wonderCMSRCE Уязвимость межсайтового скриптинга Cross Site Scripting в Wonder CMS v.3.2.0–v.3.4.2 позволяет удалённому злоумышленнику выполнить произвольный код с помощью специально созданного скрипта, загружаемого в компонент installModule. Только в образовательных целях Требуется...

CVE-2024-50379-PoC

Больше PoC см. https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Использование скрипта Массовая проверка: python poc.py -f url.txt Одиночная проверка: python poc.py -u your-ip...

CVE-2019-19781

CVE-2019-19781 Эксплойт удаленного выполнения кода для Citrix Application Delivery Controller и Citrix Gateway CVE-2019-19781 Использование : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE например : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd' Ссылки :...

CVE-2023-41425

CVE-2023-41425 설명 Wonder CMS v.3.2.0부터 v.3.4.2까지의 교차 사이트 스크립팅XSS 취약점으로, 원격 공격자가 installModule 컴포넌트에 업로드된 조작된 스크립트를 통해 임의 코드를 실행할 수 있습니다. 작동 방식 첨부된 익스플로잇 "exploit.py"는 다음 작업을 수행합니다: 1. 3개의 인자를 받습니다: URL: WonderCMS가 설치된 위치 비밀번호를 알 필요 없음 IP: 공격자의 머신 IP Port No: 공격자의 머신 PORT 2. xss.js 파일반사형 XSS용을 생성하...

plugxdecoder

plugxdecoder Базовый Python-скрипт, который декодирует трафик PlugX и зашифрованные/сжатые артефакты. Принимаются pull request'ы от желающих внести вклад. В настоящее время требует: CTypes with ntdll, dpkt http://code.google.com/p/dpkt Протестировано с Python 2.7 в Windows. Долгосрочная цель —...

CVE-2024-38077-RDLCheck

CVE-2024-38077-RDLCheck Détecte si le service RDL est en cours d'exécution et identifie rapidement les actifs affectés. Utilisation : Installation de impacket git clone https://github.com/fortra/impacket.git cd impacket python3 -m pipx install . Utilisation du script : python3 RDLCheck.py usage:...

web-traffic-generator

web-traffic-generator Быстрый и грязный генератор «органического» HTTP/S трафика. О программе Просто простой плохо написанный Python-скрипт, который бесцельно «бродит» по интернету, начиная с заданных ROOTURLS и случайным образом «кликая» по ссылкам на страницах, пока не будет достигнута заданная...

SPY-MASKER

SPY-MASKER 🔥 SPY-MASKER It is a simple Python Script to hide phishing URL under a normal looking URL google.com or facebook.com. It can be integrated into Phishing tools to look the URL legit. ⚖️ Legal Disclaimer: FOR EDUCATIONAL PURPOSES ONLY Usage of SPY-MASKER for attacking targets without prio...

dotnetpaddingoracle

dotnetpaddingoracle Небольшой скрипт для проверки уязвимости .NET веб-приложения к padding Oracle. Данный скрипт фактически проверяет, присутствует ли оракул и можно ли его эксплуатировать, а не просто установлен ли патч. использование dotnetpaddingoracle.py -h -t -b -d -s -p PARAMETER Burp reque...

Follina-MSDT-Vulnerability-CVE-2022-30190-

Follina-MSDT-Vulnerability-CVE-2022-30190- Detection and Remediation of the Follina MSDT Vulnerability CVE-2022-30190 Follina-MSDT-Vulnerability-CVE-2022-30190-에 대한 자세한 정보는 https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/ 를...

CVE-2025-11833-PoC

CVE-2025-11833 Checker python3 main.py --url http://localhost --username admin --loot This repository is for educational and research purposes only. The author does not take responsibility for any misuse. Always test PoCs in a controlled and isolated environment...