WLT3Serial

WLT3Serial Native Java-based deserialization exploit for WebLogic T3 and T3S listeners as outlined HERE. Requires third-party dependencies ysoserial and wlthint3client. Advantages/Disadvantages compared to JavaUnserializeExploits weblogic.py and loubia Advantages: Handles T3/T3S communication...

nat-tunnel

NAT Tunnel v0.01 If you have access to a server with public IP and unfiltered ports you can run NAT Tunnel NT server on the server, and NT client on your box behind NAT. the server requires 2 open ports: one for communication with the NT client --admin, the other for regular clients to connect to...

filessh

FileSSH A TUI-based file explorer for SSH servers, which allows you to browse and manage files on a remote server, edit them in-place, and recursively download directories with parallel directory traversal. It also has the ability to quickly spawn SSH sessions to paths on the remote server...

ShinoBOT

ShinoBOT（套件） 此仓库仅用于存放二进制文件，而非源代码。 详细信息请访问： http://shinobot.com http://shinosec.com/shinobotsuite/ 下载文件... 最新版本 最新的 ShinoBOT 由 Web 服务器动态生成。 请访问 http://shinobot.com/downloads.php 获取最新的多态版本。 旧版本 前往 download 目录 点击文件名 点击 Raw 按钮。 版本列表 ShinoBOT 版本| 回调 URL| 控制面板| 备注 ---|---|---|--- 3.1.0.0|...

fraud-bridge

Intro fraud-bridge helps bypassing restrictive censorship environments that block direct TCP or UDP connections, by setting up ICMP, NTP or DNS over IPv4 or IPv6 tunnels. It automatically patches TCP MSS option to achieve a non-fragmented stream of packets known as MSS-clamping to gain performanc...

amla-sandbox

amla-sandbox This repository is the release source for the amla-sandbox Python package. Development happens in the amlalabs monorepo; this repo is updated on release. The Rust runtime that compiles to amlasandbox.wasm lives in amla-sandbox-core; the exact release tag this Python package was built...

veinmind-tools

veinmind-tools Documentation veinmind-tools is self-developed by chaitin technology ， cloudwalker team incubation，a container security toolset based on veinmind-sdk 🔥 Demo Veinmind has been connected to openai. You can use openai to conduct a user-friendly analysis of the scan results, allowing y...

www-community

OWASP Community Pages OWASP Community Pages es un repositorio para contribuciones comunitarias de contenido relacionado con la seguridad. Los documentos aquí crean el sitio web en https://owasp.org/www-community/. Contribuir Damos la bienvenida a contribuciones de nuevo contenido y actualizacione...

autonomous-offensive-llm-handbook

The model proposes, the code disposes A deterministic harness for autonomous offensive agents. The model remains probabilistic. The host application owns authorization, allowed actions, evidence records and acceptance. Replaying frozen inputs and policy can reproduce those control decisions; it...

GenCrushSSTIExploit

EN GenCrushSSTIExploit is a PoC exploit tool targeting the SSTI Server-Side Template Injection vulnerability in CrushFTP CVE-2024-4040. This tool demonstrates how to exploit this vulnerability for educational and ethical hacking purposes only. Features Establishes a session with the CrushFTP serv...

SELinux-Permissive-Only-CVE-2025-21479

Versión de Cheese solo permisiva de SELinux, también conocida como CVE-2025-21479 Esta es, por ahora, una versión solo permisiva de SELinux del exploit Cheese, también conocido como CVE-2025-21479, que afectaba al adreno kgsl en muchos dispositivos, incluidos los dispositivos Samsung Snapdragon...

cookiescanner

cookiescanner Tool for check the cookie flag in multiple sites. Intro Tool created to do more easy the process of check the cookie flag when we are analyzing multiple web servers. If you want to know for why could be useful this tools? https://www.owasp.org/index.php/SecureFlag...

CVE-2024-26230

参考k0shl's blog, thanks to k0shl for the help...

CVE-2021-3156

This repository does not have a README...

CVE-2019-15642

CVE-2019-15642 Webmin Remote Code Execution authenticated python Usage: python CVE-2019-15642.py https://xxx.xxx.xxx:10000 "cat /etc/passwd" 0x01 docker for Webmin cd /vulhub/webmin/CVE-2019-15107 docker-compose up -d root@9460493fa985:/ passwd root Webmin username=root,password=root...

CVE-2022-32013

This repository does not have a README...

frida-wshook

frida-wshook frida-wshook is an analysis and instrumentation tool which uses frida.re to hook common functions often used by malicious script files which are run using WScript/CScript. The tool intercepts Windows API functions and doesn't implement function stubs or proxies within the targeted...

POC-CVE-2024-36877

This repository does not have a README...

AI-Red-Teaming-Playground-Labs

Laboratorios de Práctica de AI Red Teaming Este repositorio contiene los retos para los laboratorios utilizados en el curso "AI Red Teaming in Practice". El curso se impartió originalmente en Black Hat USA 2024 por Dr. Amanda Minnich y Gary Lopez. Martin Pouliot se encargó de la infraestructura y...

tetragon

Cilium 新增的 Tetragon 组件实现了强大的、基于 eBPF 的实时安全可观测性与运行时执行。 Tetragon 能够检测并对安全重要事件作出反应，例如： 进程执行事件 系统调用活动 包括网络和文件访问在内的 I/O 活动 当在 Kubernetes 环境中使用时，Tetragon 具备 Kubernetes 感知能力——即，它理解命名空间、Pod 等 Kubernetes 标识——从而可以针对各个工作负载配置安全事件检测。 了解更多关于 Tetragon 如何使用 eBPF 的信息。 快速开始 请参阅 Tetragon 官方文档。 要开始使用 Tetragon，请查看...