spyboy-productions

Spyo Powerful CyberSecurity Bot. Invite Bot | Discord Server | Website join our cybersec Discord server join here 🌐 Our Blog: https://spyboy.blog/ People behind bot ╰Founder: spyboy ╰Co-Founder: sudo whoami Contributors: Awesome developers who helped us and made some new commands for bot • Taj •...

nextploiter

nextploiter Exploit tool for NextJS Usage Commands Usage root@kitploit: $ npm install -g nextploiter $ nextploiter COMMAND running command... $ nextploiter --version nextploiter/1.0.0 darwin-arm64 node-v24.12.0 $ nextploiter --help COMMAND USAGE $ nextploiter COMMAND ... Commands nextploiter help...

CVE-2026-41089-Detector

CVE-2026-41089 Detection Tool This is a CVE-2026-41089 detection script for defense audits. The vulnerability is a Windows Netlogon remote code execution vulnerability disclosed by Microsoft in the May 2026 security update. The script does not send exploit packets or attempt to trigger Netlogon...

Grafxploit

Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...

CVE-2020-3452

CVE-2020-3452 CVE-2020-3452 - directory traversal in Cisco ASA and Cisco Firepower Threat Defense This utility is made for educational and ethical testing purposes only. Usage of this script for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey...

optionsbleed

optionsbleed CVE-2017-9798...

CVE-2024-29973

One day, I saw this Repositories about CVE-2024-29973 .But after my testing, the script can be executed but it doesn't work. So I made a slight change and it can be used very smoothly! Thanks for it! https://github.com/bigb0x/CVE-2024-29973 To scan a single target: python CVE-2024-29973.py -u...

blueborne-CVE-2017-1000251-POC

blueborne-CVE-2017-1000251-POC Just cloned GitLab repo. All credit goes to: marcinguy For educational and testing purposes only. It is not armed with payload, only Proof of Concept, to show it is possible...

SMBGhostScanner

SMBGhostScanner SMB Ghost Checker...

CopyFail

A CopyFail CVE-2026-31431 implementation that isnt slop. Bring your own payload if you like...

bulk_extractor

bulkextractor is a high-performance digital forensics exploitation tool. It is a "get evidence" button that rapidly scans any kind of input disk images, files, directories of files, etc and extracts structured information such as email addresses, credit card numbers, JPEGs and JSON snippets witho...

log4j-2021-vulnerability-study

log4j-2021-vulnerability-study This is a showcase how the Log4J vulnerability CVE-2021-44228 could be explored. This code is safe to run, but understand what it does and how it works!...

Strutscli

StrutsExp Usage strutsexp http://example.com/index.action...

Strutshock

Strutshock Usage strutshock http://example.com/index.action...

CVE-2025-14847

🛡️ CVE-2025-14847 - Easy Tool for MongoDB Security 📥 Download Now Download 📋 Overview CVE-2025-14847, also known as MongoBleed, is a security tool designed to identify vulnerabilities in MongoDB. This application helps users assess their MongoDB databases effectively. You do not need programming...

CVE-Requests-1896609

CVE Requests 1896609 - feiskyer/mcp-kubernetes-server Executive Summary This report details two critical security vulnerabilities discovered in the feiskyer/mcp-kubernetes-server package. When deployed, the server exposes an MCP tool named kubectl which is intended to provide limited, safe access...

toothfairy

toothfairy Related to brokentooth linked below. Unlike brokentooth, toothfairy does not require pressing buttons on the bluetooth menu. Both CVE's were revealed by @SparkZheng but with no POC so I decided to make a POC for the learning experience. The code is not perfect but it does the job. Test...

Log4J_checker

Log4Jchecker Log4J checker for Apache CVE-2021-44228 log4j-checker.sh is a bash script that merges several checks...

cve-2016-8869

CVE-2016-8869 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2016-8869 Image author: https://github.com/Medicean/VulApps/tree/master/j/joomla/1...

drupalgeddon2-cli

drupalgeddon2-cli A command-line rewrite of the Drupalgeddon2 CVE-2018-7600 proof-of-concept, built as a study exercise while working through the Hack The Box Academy Attacking Common Applications module. !WARNING For authorised security testing and education only. Running this against systems yo...