ms09-050-CVE-2009-3103-exploit

MS09-050 SMBv2 Exploit Wrapper One-liner setup for MS09-050 CVE-2009-3103 exploitation. No fuss, no debugging, just works. Why? Most MS09-050 scripts floating around require manual shellcode injection, have timing issues with handlers, or just don't work. This wrapper: Generates shellcode with...

dirstalk

Dirstalk Dirstalk is a multi threaded application designed to brute force paths on web servers. The tool contains functionalities similar to the ones offered by dirbuster and dirb. Here you can see it in action: Contents How to use it Scan Useful resources Dictionary generator Download Developmen...

auth

Auth - Authentication and User Management by Supabase Auth is a user management and authentication server written in Go that powers Supabase's features such as: Issuing JWTs Row Level Security with PostgREST User management Sign in with email, password, magic link, phone number Sign in with...

Tyr

Tyr Peer-to-peer email on the Yggdrasil network. English | Русский Screenshots | | | ---|---|---|--- | | | What is Tyr? Tyr runs a complete mail server o...

CVE-2024-50964

MX Server misconfiguration CVE-2024-50964 Description A critical vulnerability has been identified in Ferozo Webmail v1.1 , where the MX Mail Exchange server of DonWeb completely disregards configured DMARC Domain-based Message Authentication, Reporting, and Conformance policies. Although domains...

Jira-CVE-2019-8451

Jira CVE-2019-8451 POC Description Proof of concept scan to check if a Jira host is vulnerable to CVE-2019-8451 CVE-2019-8451 CVE-2019-8451 is a pre-authentication server side request forgery SSRF vulnerability found in the /plugins/servlet/gadgets/makeRequest resource. This vulnerability was...

CVE-2021-1675-CVE-2021-34527

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

CVE-2022-41040

CVE-2022-41040 CVE-2022-41040 nuclei template Unverified! Usage git clone https://github.com/numanturle/CVE-2022-41040 cd CVE-2022-41040 nuclei -u https://target -t owa.yaml GET /autodiscover/[email protected]/BACKENDAPI?&Email=autodiscover/autodiscover.json%[email protected] HTTP/1.1...

through_the_wire

Through the Wire Through the Wire is a proof of concept exploit for CVE-2022-26134, an OGNL injection vulnerability affecting Atlassian Confluence Server and Data Center versions = 7.13.6 LTS and = 7.18.0 "Latest". This was originally a zero-day exploited in-the-wild. Vendor advisory Volexity...

CVE-2008-5416

CVE-2008-5416 Microsoft SQL Server spreplwritetovarbin Memory Corruption via SQL Injection A heap-based buffer overflow can occur when calling the undocumented "spreplwritetovarbin" extended stored procedure. This vulnerability affects all versions of Microsoft SQL Server 2000 and 2005, Windows...

CVE-2024-6387-Vulnerability-Checker

CVE-2024-6387 Vulnerability Checker Overview This Python script is designed to check SSH servers for the CVE-2024-6387 vulnerability, specifically targeting the recently discovered regreSSHion , which is associated with specific versions of OpenSSH. The tool supports multiple IP addresses, URLs,...

shennina

Shennina Automating Host Exploitation with AI Abstract Shennina is an automated host exploitation framework. The mission of the project is to fully automate the scanning, vulnerability scanning/analysis, and exploitation using Artificial Intelligence. Shennina is integrated with Metasploit and Nm...

CVE-2024-40725-CVE-2024-40898

🚨Alert🚨Apache Vulnerability 🚨Alert🚨Security Advisory: CVE-2024-40725 and CVE-2024-40898🚨Alert🚨 CVE-2024-40725 Description: CVE-2024-40725 is a high-severity vulnerability found in Apache HTTP Server versions 2.4.0 to 2.4.61. This vulnerability affects the modproxy module. When the ProxyPass...

CVE-2024-0507_CVE-2024-0200-github

Intro This repository contains exploits we have developed for GitHub Enterprise vulnerabilities CVE-2024-0507 and CVE-2024-0200. Check out the full writeup at https://blog.convisoappsec.com/en/analysis-of-github-enterprise-vulnerabilities-cve-2024-0507-cve-2024-0200/ CVE-2024-0507 Privilege...

CVE-2025-53770-Scanner

CVE-2025-53770 Scanner by DanSec A simple, effective reconnaissance tool to identify potential exposure to the critical SharePoint vulnerability CVE-2025-53770. !Warning This tool is intended for authorised testing purposes only. The author DanSec takes no responsibility for misuse or damage caus...

shodan

Shodan Dorks by twitter.com/lothos612 Feel free to make suggestions Shodan Dorks Basic Shodan Filters city: Find devices in a particular city. city:"Bangalore" country: Find devices in a particular country. country:"IN" geo: Find devices by giving geographical coordinates...

DECEIVE

DECEIVE DECEIVE, the DECeption with Evaluative Integrated Validation Engine , is a high-interaction, low-effort honeypot system. Unlike most high-interaction honeypots, DECEIVE doesn't provide attackers with access to any actual system. AI actually does all the work of simulating a realistic...

CVE-2022-28117

CVE-2022-28117 Navigate CMS = 2.9.4 - Server-Side Request Forgery Authenticated Description A Server-Side Request Forgery SSRF in feedparser class of Navigate CMS v2.9.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed...

cve-2009-3555-test-server

What is this? This is a TLS server using a vendored fork of the Go TLS stack that has renegotation indication extension forcibly disabled, which will trigger CVE-2009-3555 mitigations in OpenSSL 3.0+. Note that it isn't truly vulnerable to CVE-2009-3555 because the Go TLS stack doesn't allow...

CVE-2024-40898

CVE-2024-40898 This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL/TLS certificate verification bypass under certain misconfigurations. It initiates an SSL connection to the target server and sends a HEAD request. It...