kali-packer

Kali-Packer This used to be the home of Kali-Vagrant's build-scripts. Since Kali 2025.2, the Kali team has stopped using Packer to generate Vagrant VMs and now uses DebOS. This is the same method used to generate our other/stock VMs. As this repository is no longer responsible for theKali Vagrant...

PSSW100AVB

⚡ PSSW100AVB ⚡ PowerShell Detection Evasion & Sandbox Research PowerShell Scripts With 100% AV Bypass PSSW100AVB Repository Behavioral Analysis • AV Research • Adversary Simulation PSSW100AVB Repository Description This repository contains PowerShell scripts designed for penetration testing...

Shellshock_vuln_Exploit

🚨 Shellshock RCE Exploit CVE-2014-6271 This is a Python exploit for the Shellshock vulnerability CVE-2014-6271, which affects GNU Bash. The exploit targets CGI scripts on vulnerable web servers and establishes a reverse shell to the attacker's machine. CVE ID CVE-2014-6271 Disclaimer This tool is...

CVE-2023-23397

CVE-2023-23397 Patch for MS Outlook Critical Vulnerability - CVSS 9.8 3 PowerShell scripts are included in the Patch folder. If your patch management software uses an evaluation and a remediation script, use the respective files/scripts. The All In One script will evaluate the current version of...

HeartBleed-CVE-2014-0160--SCRIPTS-python3

This repository does not have a README...

freelan

This folder contains scripts to ease development, testing and debugging...

CVE-2021-26700

RCE in NPM VSCode Extension Fixed 10th February 2021 in https://github.com/microsoft/vscode-npm-scripts/commit/cdd5e507564e0cc0f60bcccf184822be3fd73e07 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26700 Summary Remote code execution vulnerability in the eg2.vscode-npm-script...

PowershellKerberos

PowershellKerberos Some scripts to abuse kerberos using Powershell. Check how to use video Thanks to @BRIPWN YouTube Injector.ps1 Small tool for injecting kerberos tickets. Supports two work modes: U can read ticket from kirbi file 1 mode U can read ticket from b64 2 mode Examples: .\injector.ps1...

Royal_APT

RoyalAPT Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research Sharepoint tool Among the tools developed by the group for the victim, APT15 created a .net tool to enumerate the victim's sharepoint database. Below is an screen-shot from the decompiled binary...

pagodo

pagodo - Passive Google Dork Introduction pagodo automates Google searching for potentially vulnerable web pages and applications on the Internet. It replaces manually performing Google dork searches with a web GUI browser. There are 2 parts. The first is ghdbscraper.py that retrieves the latest...

CVE-2026-105829

League CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows users posting Markdown to bypass the DisallowedRawHtml extension by ending raw HTML with a bare disallowed tag name. Attackers can place a lone script or iframe line followed by a block supplying...

CVE-2026-60121-CVE-2026-61498

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

aws_pwn

AWS pwn Resumen Esta es una colección de guiones horriblemente escritos para realizar varias tareas relacionadas con pruebas de penetración en AWS. No te entristezcas si no funciona para ti. Puede que AWS haya cambiado desde que se escribió una herramienta en particular o que el código sea una...

AggressorScripts

Scripts de Aggressor Colección de scripts de Aggressor para Cobalt Strike 3.0+ obtenidos de múltiples fuentes AllInOne.cna v1 - Eliminado y desactualizado Script multiuso para mejorar la experiencia del usuario con Cobalt Strike. Creación de menús personalizados, registro, persistencia, enumeraci...

nmap-vulnerability-scan-scripts

Synopsys CyRC Vulnerability Advisory: https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps.html CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481...

AggressorAssessor

Various initial recon aggressor scripts...

spb

spb Scripts de prueba de vulnerabilidad de Shortest Path Bridging utilizados para encontrar CVE-2016-2783...

CVE-2008-2992

EP284U This project is about CVE-2008-2992. Author Name| Mail ---|--- Jonas Holmberg| [email protected] Table of Contents EP284U Author Table of Contents Project Proposal Final Report Scripts Installation and Setup Proof of Concept Project Proposal Project proposal was the intend project...

wappalyzergo

Wappalyzergo A high performance port of the Wappalyzer Technology Detection Library to Go. Inspired by Webanalyze. Uses data from https://github.com/enthec/webappanalyzer https://github.com/HTTPArchive/wappalyzer Features Very simple and easy to use, with clean codebase. Normalized regexes +...

CVE-2014-6271

CVE-2014-6271 - Shellshock.py Exploit de Shellshock, también conocido como CVE-2014-6271. Probado en Bash 3.2 y Bash 4.2. Para más información sobre la vulnerabilidad visita: https://nvd.nist.gov/vuln/detail/CVE-2014-6271 Nota El exploit se probó principalmente en Hack The Box en las siguientes...