103 matches found
CVE-2026-59827
Authorized Metabase CVE-2026-59827 Penetration Testing Tool An authorized security assessment utility for validating the presence of CVE-2026-59827 in Metabase deployments during approved penetration testing engagements. This tool is designed to demonstrate the existence of the vulnerability whil...
Integer-Overflow-test
This repository does not have a README...
CVE-2023-41064
LibWebP vulnerability CVE-2023-41064 Code lengths to trigger this vulnerability CVE-2023-41064 This is a Python script that creates an empty WebP file an image format with a specific header structure. The purpose of this script is to generate a WebP file that can be used for testing or educationa...
Juiceshopgl
Juice Shop Logo OWASP Juice Shop Test Coverage Maintainability The most trustworthy online shop out there. @dschadow — The best juice shop on the whole internet! @shehackspurple — Actually the most bug-free vulnerable application in existence! @vanderaj — First you 😂😂then you 😢 @kramse — But this...
vagrant-shellshock
This repository does not have a README...
CVE-2025-55182-Next.js-RCE
🔍 Next.js Security Testing Tool Professional security assessment utility for Next.js applications ⚠️ Disclaimer This tool is intended for authorized security testing and research purposes only. ✅ Use only on systems you own or have explicit permission to test ✅ For bug bounty programs with proper...
smuggler
/ | | | | \ | | | | |/ |/ | || |/ | | | || | | | || | | /||||/ \ |\ || | @defparam Smuggler Una herramienta de prueba de HTTP Request Smuggling / Desync escrita en Python 3 Agradecimientos Un agradecimiento especial a James Kettle por su investigación y métodos sobre desincronizaciones HTTP Y un...
inql
InQL v6.1.2 - Extensión de Burp para Pruebas Avanzadas de GraphQL !Doyensec Research...
Dirty-COW-CVE-2016-5195-Testing
Dirty-COW-CVE-2016-5195-Testing Dirty COW CVE-2016-5195 Testing...
rbndr
rbndr Servicio simple de Rebinding DNS rbndr es un servidor de nombres muy simple y no conforme para probar software contra vulnerabilidades de DNS rebinding. El servidor responde a consultas seleccionando aleatoriamente una de las direcciones especificadas en el nombre de host y devolviéndola co...
CVE-2025-61882-POC
CVE-2025-61882 Security Testing Tool 🚨 CRITICAL LEGAL WARNING See our blog post for technical details THIS TOOL IS FOR AUTHORIZED SECURITY TESTING ONLY ╔══════════════════════════════════════════════════════════════╗ ║ ║ ║ 🚨 UNAUTHORIZED ACCESS TO COMPUTER SYSTEMS IS ILLEGAL 🚨 ║ ║ ║ ║ By using th...
CVE-2023-44487
Please note that the above code uses the libcurl library for making HTTP requests. You need to install libcurl and link against it when compiling the code. The code is a simplified version, and you may need to adjust it based on your exact requirements and the specific behavior of the HTTP/2 atta...
Struts2-045-Exp
Struts2-045-Exp Struts2-045 exploitation script For testing purposes only usage:python3 struts2-045-exp.py url cmd...
COFFLoader
COFF Loader This is a quick and dirty COFF loader AKA Beacon Object Files. Currently can run un-modified BOF's so it can be used for testing without a CS agent running it. The only exception is that the injection related beacon compatibility functions are just empty. The main goal is to provide a...
DirtyCOWTester
Dirty COW Tester...
ninjakit
|||...
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence AI pen testing tool named ARTEX to carry out the attacks. The activity, per CrowdStrike Intelligence, was active from late September to early...
rapidresetclient
Rapid Reset Client Rapid Reset Client è uno strumento per testare le mitigazioni e l'esposizione a CVE-2023-44487 vettore di attacco DDoS Rapid Reset. Implementa un client HTTP/2 minimale che apre un singolo socket TCP, negozia TLS, ignora il certificato e scambia frame SETTINGS. Il client invia...
CVE-2021-43798-Grafana-path-traversal-tester
Grafana Path Traversal Tester This script automates the testing of known Grafana plugin endpoints for potential path traversal vulnerabilities using curl. 🛠 Features Reads target paths from a file e.g. paths.txt Sends HTTP requests using --path-as-is to bypass normalization Captures HTTP status...