wanderer

Wanderer Wanderer is an open-source program that collects information about running processes. This information includes the integrity level, the presence of the AMSI as a loaded module, whether it is running as 64-bit or 32-bit as well as the privilege level of the current process. This...

functrace

functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...

log4j-fuzzer

log4j-fuzzer For Single Target chmod +x log4j After That Command Simply Put Your Target ./log4j YOURTARGETURL YOURREMOTESERVER For Multiple Target Gether All Domain, Subdomain, Directroty in a list After That Simply Command This chmod +x log4j You Can Create a remote server With...

CVE-2011-1473-POC

CVE-2011-1473-POC CVE-2011-1473 POC script USAGE python3 poc-CVE-2011-1473.py --target TARGETHOST --count 5 --debug...

CVE-2021-37580

CVE-2021-37580 CVE-2021-37580 Help python CVE-2021-37580.py http://1.1.13.1...

CVE-2025-36911-Wisper_Pair_Target_Finder

This is not an exploit for CVE-2025-36911!!! This is a detector for finding potentially vulnerable devices! Only use on your own devices! I am not responsible for damages! Tested only on Debian Based Distros using python3 Usage: sudo apt update && sudo apt install python3 && sudo apt install git...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

cve-2021-29627

CVE-2021-29627 Some code to trigger the bug incl. macsetfd spray. Need some spray target, though...

CVE-2023-4596-OpenSSH-Multi-Checker

CVE-2024-6387-OpenSSH-Multi-Checker The CVE-2024-6387-checker.sh script is a tool designed to check multiple targets IPs or hostnames at once for the CVE-2024-6387 vulnerability. This script performs a local OpenSSH version check, scans remote servers for SSH banners, and determines whether they...

https-nj.gov---CVE-2018-14040

https-nj.gov---CVE-2018-14040 Vulnearability Report of the New Jersey official site In Bootstrap prior to 4.1.2, XSS is possible in the main collapse data attribute. The data-target attribute and the data-parent attribute is vulnerable to Cross-Site Scripting attacks. Test RECOMMENDATION The fix...

CVE-2020-14882_POC

CVE-2020-14882 Batch Verification Usage python3 CVE-2020-14882.py Put the targets in target.txt, one per line Example...

CVE-2018-1263-Demo

Exploit Demo This guide will help you to install vulnerable component and perform the attack related to phpMyAdmin bug mentioned in CVE-2018-1263. Description of CVE Why does the vulnerability exist How does the attack work How to install vulnerable component How to perform the attack Description...

CVE-2022-22947

CVE-2022-22947 Usage: python3 CVE-2022-22947.py url...

django_sqli_target_CVE-2025-64459

This repository does not have a README...

cve-2022-1388-1veresk

CVE-2022-1388 by 1vere$k CVE-2022-1388 the proof-of-concept. Two regimes of work with: simple target URL, default PORT will be set as 80 if it wasn't mentioned; file with list of targets : \n\r; Usage echo "+-------------------For-The-Help-------------------------------------+"; echo "Example1:...

CVE-2024-23692-EXP

CVE-2024-23692-EXP bash CVE-2024-23692.sh Nuclei nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt...

CVE-2023-20198

CVE-2023-20198 Check a target IP for CVE-2023-20198 python main.py TARGETIP...

crlfuzz

CRLFuzz A fast tool to scan CRLF vulnerability written in Go Resources Installation from Binary from Source from GitHub Usage Basic Usage Flags Target Single URL URLs from list from Stdin Method Data Adding Headers Using Proxy Concurrency Silent Verbose Version Library Help & Bugs License Version...

pocsuite3

pocsuite3 Legal Disclaimer Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only 法律免责声明 未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的 Overview pocsuite3 is an open-sourced remote vulnerability testing and...

Next.js-Proof-of-Concept

Next.js CVE Proof of Concept This repository contains reproducible proof-of-concept environments for three Next.js vulnerabilities. Each PoC includes a vulnerable target, a fixed target, and a script that demonstrates the behavioral difference between the two. The goal of this project is to make...