metabase-pre-auth-rce-poc

Metabase Pre-Auth RCE CVE-2023-38646 POC This is a script written in Python that allows the exploitation of the Metabase's software security flaw described in CVE-2023-38646. The system is vulnerable in versions preceding 0.46.6.1 , in the open-source edition, and preceding 1.46.6.1 , in the...

Log4j-Windows-Scanner

Log4j-Windows-Scanner CVE-2021-44228 vulnerability in Apache Log4j library | Log4j vulnerability scanner on Windows machines. How does it work It detects the vulnerable versions of log4j by following the folders in the C Directory. When it exposes vulnerable files, it reveals ".TXT" files as...

useragent

useragent A comprehensive and categorized collection of User Agents. Installation Instructions To install the useragent tool, use the following command: go install -v github.com/projectdiscovery/useragent/cmd/ua@latest Usage To display help for the tool, use the following command: ua -h This will...

ParsingPeas

ParsingPeas 🥒 Automated PEASS collection + a clean, portable HTML report for CTF & lab privilege-escalation work. Run one command on the target. ParsingPeas pulls LinPEAS/WinPEAS from your Kali host, runs the scan, ships the output back, and turns it into a single self-contained HTML report you c...

PySQLRecon

PySQLRecon PySQLRecon is a Python port of the awesome SQLRecon project by @sanjivkawa. See the commands section for a list of capabilities. Post demonstrating SCCM TAKEOVER-1 with PySQLRecon. Install PySQLRecon can be installed with pip3 install pysqlrecon or by cloning this repository and runnin...

CVE-2021-21972

VMware vCenter Server RCE — CVE-2021-21972 Research Lab Author: Niranjan Pokhrel Independent research project reproducing and documenting a critical, publicly disclosed VMware vCenter Server vulnerability in an isolated home lab, to understand the vulnerability class, exploitation path, and...

protobuf-inspector

protobuf-inspector Simple program that can parse Google Protobuf encoded blobs version 2 or 3 without knowing their accompanying definition. It will print a nice, colored representation of their contents. Example: As you can see, the field names are obviously lost, together with some high-level...

nextpnr

nextpnr -- a portable FPGA place and route tool nextpnr aims to be a vendor neutral, timing driven, FOSS FPGA place and route tool. Currently nextpnr supports: Lattice iCE40 devices supported by Project IceStorm Lattice ECP5 devices supported by Project Trellis Lattice Nexus devices supported by...

ESP32-Bit-Pirate

ESP32 Bit Pirate ESP32 Bit Pirate is open-source firmware that turns your device into a multi-protocol development and analysis tool, inspired by the legendary Bus Pirate. It supports sniffing, sending, scripting, and interacting with various digital protocols I2C, UART, 1-Wire, SPI, etc. via a...

esp_wifi_repeater

espwifirepeater A full functional WiFi NAT router and now also a WiFi repeater aka. L2 bridge NEW 2026: 10 years after the first release it has finally become, what it ever pretendend to be:a true WiFi Repeater. In order not to break any existing docs and links, the standard edition still remains...

CVE-2024-6387-poc-1

CVE-2024-6387 regreSSHion in OpenSSH Description CVE-2024-6387, nicknamed "regreSSHion," is a critical vulnerability in OpenSSH that allows unauthenticated remote attackers to execute code with root privileges on vulnerable Linux systems. This vulnerability arises from a race condition in the...

ClickOnceBlobber

ClickOnce AppDomainManager Injection Toolkit Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C port of ProxyBlob Agent. Ships with a C port of ProxyBlob — a SOCKS5 proxy that tunnels all traffic through Azu...

loldrivers-client

LOLDrivers-client The OG, blazingly fast , zero dependencies client for LOLDrivers by MagicSword. Scan your Windows computer for known vulnerable or malicious drivers. Installation Command Line Copy and paste the command below into a PowerShell terminal. This does not require an elevated...

QueenSono

QueenSono ICMP Data Exfiltration A Golang Package for Data Exfiltration with ICMP protocol IPv4 & IPv6. QueenSono tool only relies on the fact that ICMP protocol isn't monitored. It is quite common. It could also been used within a system with basic ICMP inspection ie. frequency and content lengt...

joy

| |/ | | | | | | | || |/ |/ , | |/ | / A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring. TLS Fingerprinting Addendum: For our most recent network fingerprinting tools and data, please see Mercury. Overview Joy is ...

WiFi-password-stealer

WiFi password stealer Have you ever seen a movie where a hacker plugs a seemingly ordinary USB drive into a computer and instantly steals data? Today, you'll be building a device that does exactly that. ⚠️ Disclaimer : All content in this project is intended for security research purposes only...

freevulnsearch

freevulnsearch This NMAP NSE script is part of the Free OCSAF project - https://freecybersecurity.org. In conjunction with the version scan "-sV" in NMAP, the corresponding vulnerabilities are automatically assigned using CVE Common Vulnerabilities and Exposures and the severity of the...

numa

Numa DNS you own. Everywhere you go. — numa.rs A portable DNS resolver in a single binary. Block ads on any network, name your local services frontend.numa, override any hostname with auto-revert, and seal every outbound query with ODoH RFC 9230 so no single party sees both who you are and what y...

DanderSpritz_lab

DanderSpritz Lab Purpose The goal of DanderSpritz lab is to allow researchers and defenders to quickly stand up a fully functional version of DanderSpritz - The Equation Group's Post exploitation tool-set and a Windows Server 2008 Domain and client as targets. The Windows target have some reverse...

vulscan

vulscan - Vulnerability Scanning with Nmap Introduction Vulscan is a module which enhances nmap to a vulnerability scanner. The nmap option -sV enables version detection per service which is used to determine potential flaws according to the identified product. The data is looked up in an offline...