DanderSpritz_lab

DanderSpritz Lab Purpose The goal of DanderSpritz lab is to allow researchers and defenders to quickly stand up a fully functional version of DanderSpritz - The Equation Group's Post exploitation tool-set and a Windows Server 2008 Domain and client as targets. The Windows target have some reverse...

sticky_keys_hunter

Sticky Keys Hunter This POC bash script tests for sticky keys and utilman backdoors. The script will connect to an RDP server, send both the sticky keys and utilman triggers and screenshot the result. This script was written to prove a theory I had about detecting these backdoors in a blackbox...

rizin-notebook

Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...

CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit

hi CTT-Serverless-RCE-v1.0---Convergent-Time-Theory-Enhanced-MCP-Exploit Serverless Framework MCP Server CVE-2025-69256 Base Score: 9.4/10 → CTT Enhanced Score: 9.9/10 A critical command injection vulnerability in Serverless Framework's MCP Model Context Protocol server enhanced with CTT temporal...

CheatSheetHost

CheatSheetHost A lightweight, content-driven web server for hosting interactive cheatsheets and reference materials. Perfect for CTF Capture The Flag challenges, reverse engineering, and technical documentation. This is best used in labs where you want to limit or forgo external traffic while sti...

How-To-Secure-A-Linux-Server

How To Secure A Linux Server An evolving how-to guide for securing a Linux server that, hopefully, also teaches you a little about security and why it matters. Table of Contents Introduction Guide Objective Why Secure Your Server Why Yet Another Guide Other Guides To Do / To Add Guide Overview...

hinge-command-control-c2

Using Hinge as a Command & Control Server Please see https://mattwie.se/hinge-command-control-c2...

SnitchDNS

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/SnitchDNS for the latest version. SnitchDNS SnitchDNS is a database driven DNS Server with a Web UI, written in Python and Twisted, that makes DNS administration easier with all configuration changed applied instantly without...

Spring4Shell-POC

Spring4Shell-POC CVE-2022-22965 Spring4Shell CVE-2022-22965 Proof Of Concept/Information + A vulnerable Tomcat server with a vulnerable spring4shell application. Early this morning, multiple sources has informed of a possible RCE exploit in the popular java framework spring. The naming of this fl...

whonow

Whonow DNS Server A malicious DNS server for executing DNS Rebinding attacks on the fly. whonow lets you specify DNS responses and rebind rules dynamically using domain requests themselves. respond to DNS queries for this domain with 34.192.228.43 the first time it is requested and then 192.168.1...

JNDI-Injection-Exploit-Plus

JNDI-Injection-Exploit-Plus 中文 README Description JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. Using this tool allows you get JNDI links, you can insert these links into your POC to tes...

rizin-notebook

Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...

CVE-2017-12542

CVE-2017-12542 This script checks if an HP iLO server is vulnerable and can add an admin user...

CVE-2026-115319

The fzf utility versions 0.36.0 through 0.74.5 are vulnerable to an inefficient algorithmic complexity vulnerability within the maskActionContents function. This flaw allows local attackers to cause a Denial of Service (DoS) by performing quadratic string concatenation . An attacker can exhaust t...

CVE-2021-48017

OrbiTeam BSCW Server versions 5.x before 5.2.5 and 7.x before 7.4.4 are vulnerable to an unauthenticated path traversal vulnerability. The flaw exists in the style_name parameter of the theme operation within the bscw.cgi component. An attacker can send a GET request to /pub/bscw.cgi/?op=theme us...

EUVD-2021-34900

OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthenticated path traversal vulnerability in the stylename parameter of the theme operation. Attackers can send GET requests to /pub/bscw.cgi/?op=theme with ../ sequences in stylename to read local files such as /etc/passwd...

CVE-2024-31848-PoC

Exploiting CData within Jetty servers - CVE-2024-31848/49/50/51 - File Path Traversal & File Read What it is A prototype PoC for the automation of vulnerability analysis on targets running CData applications on an embedded Jetty server. Usage Just use -u or --url to specify your target, the scrip...

firecrawl-mcp-server

Firecrawl MCP Server A Model Context Protocol MCP server that brings Firecrawl, the context API for AI agents, to MCP-compatible clients: search, scrape, and interact with the live web and get back clean Markdown or structured data. Big thanks to @vrknetha, @knacklabs for the initial...

FTPBuster

FTPBuster FTPBuster is a powerful command-line brute-forcing tool designed to brute-force FTP, SFTP, and explicit FTPS servers by performing dictionary-based attacks. It is intended for ethical hacking and penetration testing Features Brute-force support for FTP , SFTP , and explicit FTPS AUTH TL...

L3MON

L3MON Layer 3 Advanced Network Management and Monitoring System L3MON is a cutting-edge network management and monitoring system developed using NodeJS. It empowers users with a robust and intuitive web-based interface that enables effortless network management and monitoring capabilities from an...