proxylogon

proxylogon my exploit for the proxylogon chain Microsoft Exchange Server - CVE-2021-26855 Run: the exploit uses Impacket package, to install it run this: user@host:$ python3 -m pip install impacket then clone the exploit repo, and enter the exploit directory: user@host:$ git clone...

hackerEnv

Reach me at: hackerEnv hackerEnv is an automation tool that quickly and easily sweep IPs and scan ports, vulnerabilities and exploit them. Then, it hands you an interactive shell for further testing. Also, it generates HTML and docx reports. It uses other tools such as nmap, nikto, metasploit and...

hashID

hashID | hash-identifier Identify the different types of hashes used to encrypt data and especially passwords. This replaces hash-identifier , which is outdated! hashID is a tool written in Python 3 which supports the identification of over 220 unique hash types using regular expressions. A...

Struts2-045-Exp

Struts2 S2-045 CVE-2017-5638 Exp Tools Exp Function: Command Execute Get Target Website's Physical Path File Upload Getshell Default Webshell For Chopper Support HTTP/HTTPS Support URL With Any Port Note: Default Webshell's Password is s2045@exp Notice The Project Is Intended For...

Python

Python...

fernflower

fernflower Quickly decompile class files in the terminal Usage: Usage: java -jar fernflower.jar -= + Example: java -jar fernflower.jar -dgs=true c:\my\source\ c:\my.jar d:\decompiled\ Ps: No more need for jd-gui, it is more powerful than jd-gui...

associated-threat-analyzer

Associated-Threat-Analyzer NOTE : What do privacy laws say about sharing malicious domains and IPs ? Please See; USAGEPOLICY.md LICENSE Description Associated-Threat-Analyzer detects malicious IPv4 addresses and domain names associated with your web application using local malicious domain and IP...

RpcAuthnLevelPrivacyEnabled

Managing deployment of RPC printer association changes for CVE-2021-1678 KB4599464 Windows printer sharing error download and run: https://github.com/alvaciroliveira/RpcAuthnLevelPrivacyEnabled/blob/main/RpcAuthnLevelPrivacyEnabled.reg CREDITS TO:...

themida-unmutate

themida-unmutate A Python 3 tool to statically deobfuscate functions protected by Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation. The tool has been tested on Themida up to version 3.1.9. It's expected to work on WinLicense and Code Virtualizer as well. A Binary Ninja...

dirmap

Dirmap 中文 An advanced web directory scanning tool that will be more powerful than DirBuster, Dirsearch, cansina, and Yu Jian Demand analysis After a lot of research, summarizing an excellent web directory scanning tool has at least the following features: Concurrency engine Can use the dictionary...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: curl -sL...

weaponized-0604

Weaponized CVE-2019-0604 Automated Exploit Tool to Maximize CVE-2019-0604. Requirement The requirements.txt file should list all Python libraries this tool used, and they'll be installed using $ pip install -r requirements.txt Manual blind exploit without credential $ python exploit.py -u -c whoa...

XSS-LOADER

💎 XSS-LOADER TOOLS 💎 Written by TMRSWRR Version 1.0.0 All in one tools for XSS PAYLOAD GENERATOR -XSS SCANNER-XSS DORK FINDER Instagram: TMRSWRR 📷 Screenshots 📷 👇 💌 How to use 💌 👇 📒 Read Me 📒 This tool creates payload for use in xss injection Select default payload tags from parameter or write yo...

WhatBreach

WhatBreach WhatBreach is an OSINT tool that simplifies the task of discovering what breaches an email address has been discovered in. WhatBreach provides a simple and effective way to search either multiple, or a single email address and discover all known breaches that this email has been seen i...

cont-flood-poc

PoC for CVE-2023-45288 This is a proof-of-concept code for the CONTINUATION flood vulnerability found and documented by Bartek Nowotarski. The technical details are very well documented in his blog post here. While my focus was on the Go bug as documented by the researcher, this code should be...

SqliSniper

Features • Installation • Usage • Running SqliSniper • Contributing • SqliSniper is a robust Python tool designed to detect time-based blind SQL injections in HTTP request headers. It enhances the security assessment process by rapidly scanning and identifying potential vulnerabilities using...

GitFive

🐍 Now Python 3.13 compatible ! Description GitFive is an OSINT tool to investigate GitHub profiles. Main features : Usernames / names history Usernames / names variations Email address to GitHub account Find GitHub's accounts from a list of email addresses Lists identities used by the target Clon...

SSH-Honeypot

SSH-Honeypot Create Basic SSH Honeypot With Python For Info See Our Blog In : http://squnity.com/?p=1437 مجتمع عربي للحماية وامن المعلومات...

cherrybomb

cherrybombv1.0.png Stop half-done API specifications 💣 What is Cherrybomb? Cherrybomb is an CLI tool written in Rust that helps prevent incorrect code implementation early in development. It works by validating and testing your API using an OpenAPI file. Its main goal is to reduce security errors...

pystinger

pystinger English | 简体中文 Pystinger implements SOCK4 proxy and port mapping through webshell. It can be directly used by metasploit-framework, viper, cobalt strike for session online. Pystinger is developed in python, and currently supports three proxy scripts: php, jspx and aspx. Usage Suppose th...