dump1090

Dump1090 README Dump 1090 is a Mode S decoder specifically designed for RTLSDR devices. The main features are: Robust decoding of weak messages, with Dump1090 many users observed improved range compared to other popular decoders. Network support: TCP30003 stream MSG5..., Raw packets, HTTP. Embedd...

Remediating-CVE-2013-3900-EnableCertPaddingCheck-

Remediation Report: CVE-2013-3900 on Windows Server 2019 Azure VM Remediating CVE-2013-3900 EnableCertPaddingCheck During an authenticated vulnerability scan using Tenable/ Nessus, I identified CVE-2013-3900 on my Windows Server 2019 Datacenter instance hosted in Microsoft Azure. The scan utilize...

BirDuster

BirDuster About BirDuster is a Python based knockoff of the original DirBuster. BirDuster is a multi threaded Python application designed to brute force directories and files names on web/application servers. Often is the case now of what looks like a web server in a state of default installation...

CVE-2022-23884

CVE-2022-23884 There is a network-layer vulnerabilities in the official server of Minecraft: Bedrock Edition aka Bedrock Server,which allow attacker to launch a DoS attack. CVE-2022-23884 Mojang Bedrock Dedicated Server 1.16.0-1.18.12 is affected by an large loop and crash server caused by...

CVE-2021-42321

CVE-2021-42321 Microsoft Exchange Server Poc The patch:https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-42321...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

cve-2015-5477

PoC for BOND9 TKEY assert DoS CVE-2015-5477 This exploit tests to see if a BIND9 server is vulnerable by sending the exploit in order to see if it crashes. It's C code that you compile the normal way on Unix/Window, such as: gcc tkill.c -o tkill It'll run over both IPv4 and IPv6. This is what it...

nmap-nse-vulnerability-scripts

NMAP vulnerability scanning scripts A collection of nmap vulnerability scanning scripts to aid afforable detection and remediation. Background These scripts use the Nmap Scripting Engine NSE to implement checks for various vulnerabilities. References: https://nmap.org/book/man-nse.html...

kubebox

= Kubebox small^⎈❏^ Antonin Stefanutti https://github.com/astefanutti@astefanutti // Meta :description: Terminal and Web console for Kubernetes // Settings :idprefix: :idseparator: - :experimental: // Aliases ifdef::env-github :note-caption: ℹ️ :icon-check: ✔️ :icon-edit: ✏️ endif::...

CVE-2020-14882

CVE-2020-14882 CVE-2020-14882 Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows...

CVE-2020-11932

CVE-2020-11932 🐛🔍 Check CVE-2020-11932 and test for host relating to this vulnerability Usage Download git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh With curl so no download bash curl -s...

GraphSpy

GraphSpy / / by RedByte1337 / / / / | | / / / \ \ \ \ \ | | \ \ \ \ | | \ \ \ | / | | | \ / \ | \ | \ /| | | /|| / / / | / /|| / /|| / Table of Contents GraphSpy Table of Contents Quick Start Installation Execution Usage Features Release Notes Upcoming Features Sponsors Credits Quick...

CVE-2026-44578-next-js-ssrf

CVE-2026-44578 — Next.js WebSocket Upgrade SSRF Lab Self-contained lab to reproduce the CVE-2026-44578 vulnerability CWE-918, SSRF in self-hosted Next.js applications that use the built-in Node.js server. Field| Value ---|--- CVE| CVE-2026-44578 GHSA| GHSA-c4j6-fc7j-m34r CVSS 3.1| 8.6 HIGH...

Docker IPsec VPN Server

English | 简体中文 | 繁體中文 | Русский IPsec VPN Server on Docker Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Based on Alpine 3.23 or Debian 12 with Libreswan IPsec VPN software and xl2tpd L2TP daemon. An IPsec VPN encrypts your network traffic, so that nobody betwee...

CVE-2026-101802

A flaw was found in the MySQL Server Parser component. An authenticated remote attacker with low privileges can exploit this vulnerability through network access using multiple protocols. A successful attack can cause the service to hang or repeatedly crash, resulting in a Denial of Service DoS...

CVE-2026-101801

A flaw was found in the Server Optimizer component of MySQL. A remote attacker with high privileges can exploit this vulnerability across network protocols to cause the database to hang or repeatedly crash. This issue leads to a complete Denial of Service DoS, rendering the service unavailable to...

CVE-2026-101798

A flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges and network access can exploit this vulnerability by submitting crafted requests across supported protocols. Successful exploitation allows the attacker to cause the database server to hang or crash...

CVE-2023-22515

Red Team Tool - Confluence Unauthorized Add Admin User CVE-2023-22515 Exploit Tool Vulnerability Scope 8.0.0 = Confluence Data Center and Confluence Server = 8.0.4 8.1.0 = Confluence Data Center and Confluence Server = 8.1.4 8.2.0 = Confluence Data Center and Confluence Server = 8.2.3 8.3.0 =...

hacktricks-cloud

HackTricks Cloud Hacktricks logos & motion designed by @ppieranacho .1 Run HackTricks Cloud Locally The workflow below follows Git's documented clone, checkout, and pull operations and the repository's published language branches and container setup.238910 Download latest version of hacktricks...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...