sslWeakness

sslWeakness Example script demonstrating a weak PRNG, CVE-2008-0166...

metasploit_in_termux

Metasploit Framework 6 in Termux How to Install Before In order to have updated Termux: Purge all data of Termux in Android Settings Uninstall and reinstall latest Termux version from F-Droid Version on Play Store is outdated Then launch Termux to initialization, close it force stop, not swap...

SUID3NUM

SUID3NUM A standalone python2/3 script which utilizes python's built-in modules to find SUID bins, separate default bins from custom bins, cross-match those with bins in GTFO Bin's repository & auto-exploit those, all with colors! ͡ʘ ͜ʖ ͡ʘ Description A standalone script supporting both python2 &...

blindy

Blindy Simple script for running brute-force blind MySql injection Note: this script was created for fun, helpful in some ctf challenges : description The script will run through queries listed in sets in provided file and try to brute-force any place where placeholder is found. GET & POST http...

EmBomber

EmBomber Python Script for Email Bombing which supports Gmail, Yahoo, Hotmail/Outlook Made with by Mazen Elzanaty Features Support Gmail Support Yahoo Support Hotmail/Outlook Usage EmBomber should work on all Linux distros running Python 2.7 First, clone it by entering the following command in th...

CVE-2025-56762

Description: The application leverages “error.php” to serve the respective error code as per the use case back to the web application upon encountering an error. Upon inspecting the source code, it was found that the application does not sanitize the parameter “code” when crafting a malicious...

hardcidr

hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...

hardcidr

hardCIDR Contexte Un script Bash Linux pour découvrir les blocs de réseaux, ou plages en notation CIDR, appartenant à l'organisation cible lors de la phase de collecte d'informations d'un test d'intrusion. Ces informations sont gérées par les cinq Registres Internet Régionaux RIR : ARIN Amérique ...

CitrixADC-CVE-2020-8300

Detect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API EXAMPLE & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" If this proves useful to anyone I will develop further with the...

Paste2Web

Paste2Web - beta version A python3 script that uses cl1p website to send and receive secret messages How does it work ? -On sending it spliting the message to words then generates a random word and uses it in posting every word alone in a link and gives you a key -Now to receive you should contac...

CVE-2023-32629-CVE-2023-2640---POC-Escalation

CVE-2023-32629 & CVE-2023-2640 : Privilege escalation Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640. TOTALLY STOLE IT FROM https://twitter.com/liadeliyahu/status/1684841527959273472?t=puhDAlZCy75s7UbdV-bFw&s=19 PLEASE RETWEET THE ORIGINAL SOURCE I just wanted to...

wifi-hacker

Script Shell pour attaquer les connexions sans fil à l'aide des outils intégrés de Kali. Prend en charge toutes les sécurités WEP, WPS, WPA, WPA2 !Imagehttps://assets.kitploit.com/production/public/readmes/placeholders/f0fc86cfe65f76d40e15aaec61704ec8220a56dc89d4be03c46f67cb31b9f...

PAN-OS_CVE-2024-9474

python3 exp.py...

Simple-CVE-2021-41773-checker

Simple CVE-2021-41773 checker Simple bash script to check multiple hosts for CVE-2021-41773 Apache. + Usage: ./CVE-2021-41773.sh hosts.txt...

kaboom

About Kaboom is an automatism for penetration tests. It performs several tasks for the first two phases of the test: information gathering and vulnerability assessment. All informations collected are saved into a directory hierarchy very simple to browse also in case of multiple targets. Details...

Invoke-Stealth

Invoke-Stealth is a Simple & Powerful PowerShell Script Obfuscator. This tool helps you to automate the obfuscation process of any script written in PowerShell with different techniques. You can use any of them separately, together or all of them sequentially with ease, from Windows or Linux...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

CVE-2024-0012-POC

This is actual POC, inspired by https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/ Usage like - python3 cve-2024-0012-pan-os-poc.py --url "https://target-system" --no-verify --no-verify if SSL doesn't work or expired else do not use this tag...

ddos

ndbiaw A Python script to DDOS a website using HTTP Flood method, a normal website only needs 5 seconds to completely collapse! Usage: This script can run on both Windows and Android Termux, below is the guide: pip install -r requirements.txt python ndbiaw.py Important!!! This script is for...

CVE-2020-13942

CVE-2020-13942 Run httpx or httprob on the targets before using the script. USAGE ./CVE-2020-13942.sh target.txt Credit This script was made from Rohit Gautam Repo...