CVE-2014-0346

CVE-2014-0160 Heartbleed Test Script This script checks for the infamous Heartbleed vulnerability CVE-2014-0160 in SSL/TLS servers. 📜 Credits Based on the original script by Jared Stafford [email protected] Modified and updated by Songül Kızılay for educational and research purposes ⚠️...

project_BIT_nmap_script

Python program to detect vulnerability with CVE-2022-32073 in large networks This python program runs nmap on an address passed as an argument, by default it runs on all ports but port number can also be given as an argument. It runs nmap with custom created wolfsshversion.nse scripts which uses...

CVE-2022-37932

HP Switch Firmware Authentication Bypass Vulnerability CVE-2022-37932 Firmware Version: PD.02.21 Affected Devices: HP 1920 Series Smart Managed Switches Overview This repository documents a critical authentication bypass vulnerability in HP 1920 Series Smart Managed Switches running firmware...

CVE-2025-55182-test

CVE-2025-55182 Test Check if your endpoint is potentially vulnerable to CVE-2025-55182. Requirements pip install requests Usage Single target $ python3 react2shell-test.py -u https://app.example.com Multiple targets from file $ python3 react2shell-test.py -l targets.txt With options $ python3...

CVE-Vulnerability-Information-Downloader

CVE Vulnerability Information Downloader Common Vulnerability Scoring System CVSS is a free and open industry standard for assessing the severity of computer system security vulnerabilities. Exploit Prediction Scoring System EPSS estimates the likelihood that a software vulnerability will be...

CVE-2023-26256

CVE-2023-26255 CVE-2023-26256 POC FOFA: body="JIRA" && body="2.0.50" Usage: python3 CVE-2023-26256.py -h...

diskwalker

Diskwalker простой скрипт для обхода вашего диска и отслеживания интересных наборов файлов После получения доступа к удалённой машине во время пентеста вам может понадобиться найти интересные конфигурационные файлы или бинарники для попытки повышения привилегий. Скрипт самодостаточен и работает к...

Zerologon_CVE-2020-1472

Zerologon CVE-2020-1472 This script is made for bulk checking your domain controllers for the Zerologon vulnerability. Note Zerologon vulnerabilities are dangerous for your domain controller, dont use the exploit on production servers. Arguments --ip Ip address for check on CVE-2020-1472 --file...

unauthorized-tools

unauthorized-tools Unauthorized Batch Detection Script mongo unauthorized python mongounauth.py ip.txt...

log4j-fix-CVE-2021-44228

log4j-fix-CVE-2021-44228 Windows Batch Script to Scan all the local drive and Fix the log4jCVE-2021-44228 impacted jars Below configurations are needed to make it work SET ZIPPATH =C:\PROGRA1\7-Zip\7z.exe set RESULTFILENAM E=log4jimpactedjars set APPLYFIX =FALSE set LOG4JLOGDIR =%temp% ZIPPATH...

CVE-2019-16278-PoC

CVE-2019-16728-PoC CVE-2019-16728 Ссылка https://git.sp0re.sh/sp0re/Nhttpd-exploits/src/branch/master/CVE-2019-16278.sh...

CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script

CYBERDUDEBIVASH ServiceNow AI Agent Audit Script v1.1 Jan 2026 Secure Your AI Future – Enterprise-Grade Audit Tool with 2026 Updates This script audits ServiceNow AI Agents for vulnerabilities like CVE-2025-12420, governance gaps, and compliance risks. Powered by CYBERDUDEBIVASH – your global...

Nmap-scripts

Nmap Scripts raikia-screenshot.nse This nmap script will take a screenshot of https://ip:port, as well as https://hostname:port AND https://sslcertname:port. This differs from other screenshot nmap utilities because it will allow javascript execution, and it will have a timeout on the screenshot...

OpenSSL-CCS-Inject-Test

OpenSSL CCS Inject Test This script is designed for detection of vulnerable servers CVE-2014-0224. in a wide range of configurations. It attempts to negotiate using each affected protocol version SSLv3, TLSv1, TLSv1.1, and TLSv1.2 advertising a comprehensive set of ciphers. Changes: v0.1 - Update...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

airgeddon

airgeddon Ceci est un script bash multi-usage pour les systèmes Linux afin d'auditer les réseaux sans fil. Toutes les informations nécessaires sur la façon d'« installer | utiliser | profiter » de airgeddon sont présentes sur le Wiki GitHub. I. Contenu et fonctionnalités Accueil Fonctionnalités...

MemITM

Qu'est-ce que l'outil MemITM ? L'outil MemITM Mem In The Middle a été développé pour intercepter facilement les "messages" dans la mémoire des processus Windows. Nous avons développé de nombreux outils d'interception mémoire personnalisés pour capturer les messages réseau avant chiffrement, ou le...

procrustes

Procrustes Un script bash qui automatise l'exfiltration de données sur DNS en cas d'exécution de commande aveugle sur un serveur où toutes les connexions sortantes, sauf DNS, sont bloquées. Le script prend actuellement en charge sh, bash et powershell et est compatible avec une exécution de style...

CVE-2019-10945

Code Conversion to Python 3 This code is taken from Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Joomla". The original code...

Wallet-Transaction-Monitor

Wallet Transaction Monitor This script monitors a Bitcoin wallet address and notifies the user when there are changes in the balance or new transactions. It provides real-time updates on incoming and outgoing transactions, along with the corresponding amounts and timestamps. Additionally, it can...