46009 matches found
CMS-made-simple-sqli-python3
CMS-made-simple-sqli-python3 CMS Made Simple 2.2.10 - SQL Injection rewritten for python3, CVE-2019-9053 I found it problematic to run this exploit on kali linux, since python2 doesn't have termcolor, so with very few brackets I made it working with python3. All credit goes to:...
learnjavabug
This project is for security research only. It is forbidden to use this project to launch illegal attacks. The user is responsible for any consequences. This is a personal project for reproducing and publishing vulnerabilities that I find interesting or that have a significant impact. There isn't...
CVE-2024-21413-Outlook-Assessment
title: "CVE-2024-21413 Moniker Link: Microsoft Outlook Remote Code Execution Assessment" date: 2026-06-28 author: Lindon Mitchell YoguiCR role: Security Researcher / Exploit Analyst status: Completed classification: Public / Portfolio environment: TryHackMe - Moniker Link Lab Vulnerability...
Rabbit Hole
Overview Rabbit Hole provides a very limited subset of the functionality of Maltego, focused on creating visual representations of information for Penetration Testing. It provides creation of various types of nodes such as IP Addresses, Ports, Services, etc and links between them, with a much mor...
ChromSploit-Framework
ChromSploit Framework v3.0 Professional Security Research Platform for Browser Vulnerability Analysis Multi-CVE exploitation chains with advanced obfuscation, intelligent detection, and comprehensive analytics Overview ChromSploit Framework is a cutting-edge educational security research tool...
CVE-2021-2394
CVE-2021-2394 POC of CVE-2021-2394 Disclaimer This project is for educational use only. Any direct or indirect consequences and losses caused by unauthorized testing shall be borne solely by the user. Notes The POC uses IIOP to send packets. Please add the relevant dependencies the 12.2.1.3.0...
CVE-2026-66066-POC
PoC for CVE-2026-66066 - Minimal stock Rails/libvips lab This repository reproduces the Rails Active Storage file-read-to-RCE chain described by GHSA-xr9x-r78c-5hrm against Rails 8.1.3, the newest affected Rails 8.1 release. Rails 8.1.3.1 is the patched control. Use it only in the disposable loca...
CVE-2022-22954
Multi-vulnerability trigger point detection, multi-threaded batch detection, command execution, file writing root@kitploit: // Single target vulnerability detection python CVE-2022-22954.py -u https://x.x.x.x // Command execution python CVE-2022-22954.py -u https://x.x.x.x -c "id" // Write file...
MS17-010
MS17-010 As all of our research is now in Metasploit master repository, there was no reason to confuse everyone by keeping this repository open as there were two versions of everything and due to overwhelming popularity support became a nightmare as this is merely a side project. Please do not ma...
crauEmu
Mascot designed by@kottsarapkin crauEmu is an uEmu extension for developing and analyzing payloads for code-reuse attacks. Slides from ZeroNights 2019 Demo 1 - X32-64, Edge, rop-gadgets from pwnjs Demo 2 - ARM64, checkm8 callback-chain RopEditor Installation 1. Put the file crauEmu.py in same...
gping
gping 🚀 Ping, but with a graph. Comes with the following super-powers: Graph the ping time for multiple hosts Graph the execution time for commands via the --cmd flag Custom colours Windows, Mac and Linux support Table of Contents Install 💿 Usage 🎷 Install 💿 macOS Homebrew: brew install gping...
gping
gping 🚀 Ping, pero con un gráfico. Viene con los siguientes superpoderes: Graficar el tiempo de ping de múltiples hosts Graficar el tiempo de ejecución de comandos mediante la opción --cmd Colores personalizados Soporte para Windows, Mac y Linux Table of Contents Instalación 💿 Uso 🎷 Instalación 💿...
bandit
.. image:: https://raw.githubusercontent.com/pycqa/bandit/main/logo/logotype-sm.png :alt: Bandit ====== .. image:: https://github.com/PyCQA/bandit/actions/workflows/pythonpackage.yml/badge.svg?branch=main :target:...
Sentora
Sentora Community Edition Self-hosted security stack for small/mid teams that don't have a dedicated SOC. Drop an agent on each endpoint, point them at the server, and you get SIEM logs, file integrity, package vulnerabilities, an OpenSearch-powered log explorer, autonomous AI triage and a SOAR...
cve-2018-3811
CVE-2018-3811 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2018-3811 Image author: https://github.com/cved-sources/cve-2018-3811...
CVE-2025-30712-_PoC
This repository does not have a README...
CVE-2020-1938
CVE-2020-1938 Suricata Detection Rule root@kitploit: CNVD-2020-10487 CVE-2020-1938 alert tcp any any - any 8009 msg:"CNVD-2020-10487 Ghostcat"; content:"javax|2e|servlet|2e|include|2e|requesturi"; content:"javax|2e|servlet|2e|include|2e|pathinfo";...
shodscript
ShodScript Automate exploit and PoC execution against Shodan search results. Query Shodan, filter targets, and run your scripts against every match - concurrently, with structured output and export. Why You have a PoC script that takes an IP and port. You want to run it against every host matchin...
CVE-2022-23093
CVE-2022-23093 FreeBSD Stack-Based Overflow Informations The shellcode that is used by default is FreeBSD/x86-64 - execve - 28 bytes from Gitsnik change it and put your own one for starting Details of Vulnerability The ping utility, used to solicit an ICMP ECHORESPONSE from a host or gateway, is...