fwknop

fwknop - Single Packet Authorization Introduction fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired...

knocker

Knocker is a self-hosted service that provides an HTTP based "knock-knock" single-packet authorization SPA gateway for your Homelab with web, cli + gnome and android clients. it can be used as authentication for your reverse proxy like Caddy, or even on the firewall level using the FirewallD...

Cleo-CVE-2024-50623-PoC

For more PoCs, see https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Batch detection: python poc.py -f url.txt Single detection: python poc.py -u your-ip...

h2spacex

H2SpaceX HTTP/2 low level library based on Scapy which can be used for Single Packet Attack Race Condition on H2 This library was part of an academic research with title of QUIC-er Races: HTTP/3 won’t save you from TOCTOU vulnerabilities. Dive into Single Packet Attack Article I wrote an article...

spraycharles

Spraycharles hey, yo I'm feeling like spraycharles - Chiddy Bang Low and slow password spraying tool, designed to spray on an interval over a long period of time. Includes spraying plugins for Office365, OWA, EWS, Okta, ADFS, Cisco SSL VPN, Citrix Netscaler, Sonciwall, NTLM over HTTP, and SMB...

k8scout

k8scout Beta — A single-binary Kubernetes attack path engine for authorized security assessments. Drop it into a compromised pod, run it, and get a map of every realistic escalation path, from your current foothold to cluster-admin, node access, secret theft, and cloud IAM roles. The idea You hav...

CVE-2023-4357-Chrome-XXE

Tool Introduction The world's first single file exploits the CVE-2023-4357 Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors. The world's first single file exploits the CVE-2023-4357 Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitor...

shootback

shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...

authelia

!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...

teleport

Teleport provides connectivity, authentication, access controls and audit for infrastructure. You might use Teleport to: Set up single sign-on SSO for all of your cloud and on-prem infrastructure. Protect access to servers, Kubernetes clusters, databases, Windows desktops, web applications, and...

goshs

You're mid-engagement. You need to transfer a file, catch an SMB hash, or stand up a quick HTTPS server — and python3 -m http.server won't cut it. goshs is a single-binary file server built for the moments when you need more than Python's SimpleHTTPServer but don't want to configure Apache. HTTP/...

webanalyze

webanalyze This is a port of Wappalyzer in Go. This tool is designed to be performant and allows to test huge lists of hosts. !NOTE Because Wappalyzer removed the public access to their app definitions, webanalyze currently loads definitions from enthec. Installation and usage Precompiled release...

cve-2022-1388-1veresk

CVE-2022-1388 by 1vere$k CVE-2022-1388 the proof-of-concept. Two regimes of work with: simple target URL, default PORT will be set as 80 if it wasn't mentioned; file with list of targets : \n\r; Usage echo "+-------------------For-The-Help-------------------------------------+"; echo "Example1:...

burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

CVE-2024-9047-PoC

This script is only for authorized system testing. Please cite the source if referenced. For more PoCs, see https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X Batch testing: python poc.py -f url.txt Single testing: python poc.py -u your-ip...

TeamsNTLMLeak

Description When a user navigates to a "Website" tab that directs to a specially designed webpage, it can result in the exposure of the NTLM hash through the activation of an Office URL scheme, thereby reducing the process to a single-click path for the leak. If one attempts to open a link in the...

hashID

hashID | hash-identifier Identify the different types of hashes used to encrypt data and especially passwords. This replaces hash-identifier , which is outdated! hashID is a tool written in Python 3 which supports the identification of over 220 unique hash types using regular expressions. A...

enseal

enseal Secure, ephemeral secret sharing for developers. Stop pasting secrets into Slack. enseal makes the secure path faster than the insecure one — share .env files and secrets through encrypted, single-use channels with one command and zero setup. sender $ enseal share .env Share code:...

CVE-2021-37580

CVE-2021-37580 Support for single and batch verification of CVE-2021-37580 vulnerability Single URL detection: File batch verification:...

CVE-2026-PSA-2026-00043-1

PSA-2026-00043-1 CVE-2026-PSA-2026-00043-1 Proxmox VE 7.0–8.0.3: unauthenticated, single-request root auth bypass Donate Help maintain this project If you find this project useful, please consider supporting its ongoing maintenance through PayPal or ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក...