qyvora-toha3ee

toha3ee A local & network security assessment framework written in Go. It is a research and authorised-penetration-testing tool that covers the network assessment pipeline — host and service discovery, enumeration, credential auditing, vulnerability identification and authorised exploitation. Its...

mime-is-broken

Toolkit for generating and testing bad MIME This is a toolkit for generating mails which broken MIME in order to test behavior of MUA and security products, i.e. if they align or if broken MIME could be used to bypass a security product. Files tools/ Tools for creating broken mails and testing. S...

CVE_Demo

CVEDemo Hi, This is Muhammad Navaid Zafar Ansari, I have created this repository to maintain my CVE demos and give the fix recommendation to those people who want to use these applications where I found the vulnerabilities. Disclaimer: All the demo's are created only for educational purpose, Do...

SAMLRaider

SAML Raider - SAML2 Burp Extension Description SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates. This software was created by Roland Bischofberger and Emanuel Duss during a bachel...

AFL

american fuzzy lop Originally developed by Michal Zalewski [email protected]. See QuickStartGuide.txt if you don't have time to read this file. 1 Challenges of guided fuzzing Fuzzing is one of the most powerful and proven strategies for identifying security issues in real-world software; it ...

freelan

This folder contains scripts to ease development, testing and debugging...

RCE-Exploit-Framework

RCE-Exploit-Framework This framework is designed to assist penetration testers or developers in understanding the mechanics of remote code execution RCE exploitation. Features Payload Generator : Supports the creation of custom payloads based on Python, Bash, and PHP. Exploit Executor : Delivers...

Open-Redirect-Finder

Open-Redirect-Finder Open Redirect Finder is an automation tool used to detect open redirect vulnerabilities on a URL. Features Batch Processing: Supports testing multiple URLs at once from an input file. Automatic Validation: Checks whether the entered URLs are vulnerable to open redirects...

FUCKER

FUCKER Windows-native penetration testing framework written in Go. Modular architecture with AI-driven decision engine OpenAI-compatible API. Build go build -ldflags="-X main.version=$git describe --tags" -o FUCKER.exe ./cmd/fucker/ Cross-compile: GOOS=linux GOARCH=amd64 go build -o...

apex

Pensar Apex AI-powered penetration testing using autonomous agents — directly in your terminal. Run blackbox and whitebox pentests that explore, reason, and surface real vulnerabilities. Want to run from the cloud or integrate it with your CI/CD? See Pensar Console. Use Cases Developers Run...

internal-penetration-testing-project-using-Metasploit

This repository does not have a README...

CVE-2026-50055

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

CVE-2026-20169

IoT-FND Overview Features Network Discovery The scanner checks a defined IP range and looks for devices exposing the expected management service. Example checks: IP range enumeration TCP port availability testing Service discovery Basic connection validation Windows Native Implementation Built...

CVE-2026-6875

CVE-2026-6875 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python ...

CVE-2020-14882-GUI-Test

CVE-2020-14882-GUI Recién comencé a aprender el framework Qt, así que esto es un producto del aprendizaje del framework de desarrollo QT. Actualmente presenta problemas como recepción incompleta de eco, entre otros, solo para pruebas...

cve-2017-1182-TN

cve-2017-1182-TN Malware Analysis Testing...

Joomla-CMS-Full-Lifecycle-Pentest

Full-Lifecycle CMS Penetration Testing Joomla 4.2.5 📌 Project Overview This project demonstrates a full-lifecycle penetration test conducted on an open-source CMS Joomla 4.2.5. The entire test follows standard methodologies OWASP/PTES from lab deployment up to exploitation, post-exploitation, and...

PHPunit-Exploit

PHPunit Exploiter + Checker CVE-2017-9841 Overview : PHPUnit is a unit test framework for the PHP programming language. This is a sample xUnit architecture for a unit testing framework that originated with SUnit and became popular with JUnit. PHPUnit was created by Sebastian Bergmann Installation...

Zerologon_CVE-2020-1472

ZerologonCVE-2020-1472 Objective This vulnerability research aimed to establish a controlled environment for simulating a Zerologon on windows Server 2016 through Kali Linux for detection and mtigiation purposes. The primary focus was to perform a vulnerability pentration and show the possiblity ...

Penetration-Testing-Walkthrough-Hacksudo-Thor

HackSudo Thor Recorrido Completo de Pruebas de Penetración Objetivo: HackSudo Thor de VulnHub Objetivo: Obtener acceso root y leer /root/proof.txt Entorno: Laboratorio aislado de VirtualBox segmentado por un firewall pfSense Tabla de Contenidos Resumen Topología de Red Resumen de la Cadena de...