121542 matches found
CVE-2024-39248
Exploit Title: SimpCMS v0.1 - Cross Site Scripting XSS CVE: CVE-2024-39248 Exploit Author: Jason Jacobs 0xjasonjacobs - Twitter Vendor Homepage: https://sourceforge.net/projects/simpcms/ Vulnerable endpoint: /SimpCMS/admin.php A cross-site scripting XSS vulnerability in SimpCMS v0.1 allows...
Log4j-Scanner-Exploit
Log4Shell-Scanner-Exploit Bash script to remotely identify and/or exploit the Log4j vulnerability. This tool performs various tests using LDAP payloads and X-Api-Version, User-Agent, and X-Forwarded-For headers. Always use this script with prior authorization from the owner of the audited...
p-gen
ABOUT TOOL : P-gen tool is an python based script which create/generate randrom passwords in fraction of seconds. This tool works on both rooted Android device and Non-rooted Android device. AVAILABLE ON : Termux TESTED ON : Termux REQUIREMENTS : internet storage 200 MB FEATURES : + Stable tool !...
nmap-CVE-2023-35078-Exploit
nmap-CVE-2023-35078-Exploit Nmap script to exploit CVE-2023-35078 - Mobile Iron Core Save the script into a file named nmap-CVE-2023-35078-Exploit.nse. To run the script, you can use Nmap's --script-args option to provide the output file path: nmap -p --script nmap-CVE-2023-35078-Exploit.nse...
CVE-2023-38831
CVE-2023-38831 Exploit - Bait and Switch Archive Generator Overview This Python script is designed to generate a "bait and switch" archive file. It is meant for educational and ethical hacking purposes only. Please ensure that you have the necessary permissions before using this script. A "bait a...
r00kie-kr00kie
r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...
OFFPORT_KILLER
.. raw:: html .. raw:: html KILLER PROJECT .. image:: https://img.shields.io/github/last-commit/TH3xACE/OFFPORTKILLER?style=plastic :target: https://github.com/TH3xACE/SUDOKILLER :alt: Last Commit .. raw:: html Manual Port Scanning Enumerate Potential Service If you like the tool and for my...
Mezzanine-CMS-6.1.0-XSS
Mezzanine-CMS-6.1.0-XSS CVE-2025-50481 Description A cross-site scripting XSS vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post. CVE: CVE-2025-50481 Affected version:...
tscopy
TScopy Actualizado 2022-03-31 Presentando TScopy Durante un compromiso de Respuesta a Incidentes IR, es necesario tener la capacidad de analizar archivos en el sistema de archivos. A veces, estos archivos están bloqueados por el sistema operativo SO porque están en uso, lo que es particularmente...
LeakedMails
LeakedMails - Check HaveIBeenPwned ██╗ ███████╗ █████╗ ██╗ ██╗███████╗██████╗ ███╗ ███╗ █████╗ ██╗██╗ ███████╗ ██║ ██╔════╝██╔══██╗██║ ██╔╝██╔════╝██╔══██╗████╗ ████║██╔══██╗██║██║ ██╔════╝ ██║ █████╗ ███████║█████╔╝ █████╗ ██║ ██║██╔████╔██║███████║██║██║ ███████╗ ██║ ██╔══╝ ██╔══██║██╔═██╗ ██╔═...
CVE-2022-22965
CVE-2022-22965 Spring Framework RCE CVE-2022-22965 Nmap NSE Checker Non-Intrusive This script looks the existence of CVE-2022-22965 Spring Framework 5.2.x / 5.3.x RCE uses a payload "/?class.module.classLoader.definedPackages%5B0%5D=0" through a GET request looking 400 code as response NON...
log4j_checker
Log4jchecker.py CVE-2021-44228 Description This Python3 script tries to look for servers vulnerable to CVE-2021-44228, also known as Log4Shell, a very critical vulnerability found in Log4j2 Java logging library. It doesn't rely on external DNS log servers to verify and validate the vulnerable...
Confluence-CVE-2022-26134
Confluence-CVE-2022-26134 dork on shodan https://www.shodan.io/search?query=http.favicon.hash%3A-305179312&page=2 Curl poc curl -v...
CVE-2026-106575
A flaw was found in ImageMagick. An attacker could provide a specially crafted Magick script that fails to release opened file pointers during execution. Repeated processing of such scripts can exhaust available file descriptors system resources used to manage open files, resulting in a Denial of...
CVE-2020-3452-PoC
CVE-2020-3452 hello Guys This is a simple script to download the nmap NSE script and put in NSE modules file and run the nmap command with and hosts you want Put your host list in list.txt file Thanks...
Identificador-CVE-2018-11759
Other language git - pt-BR Check if your instances are expose the CVE 2018-11759 The archive main are a script in bash for exploiting. The urls shall use the protocol and complete addres, example: https://test.site.com.br For more urls in one consult, can be used the here-document, example: Call...
proxy2
proxy2 HTTP/HTTPS proxy in a single python script Features easy to customize require no external modules support both of IPv4 and IPv6 support HTTP/1.1 Persistent Connection support dynamic certificate generation for HTTPS intercept This script works on Python 2.7. You need to install OpenSSL to...
LARE
LARE L ocal A uto R oot E xploiter is a simple bash script that helps you deploy local root exploits from your attacking machine when your victim machine do not have internet connectivity. The script is useful in a scenario where your victim machine do not have an internet connection eg. while yo...