CVE-2024-55591

FortiGate CVE-2024-55591 1Scan Latest Version https://github.com/0x7556/1Scan Affected Versions FortiOS 7.0.0 through 7.0.16 FortiProxy 7.0.0 through 7.0.19 FortiProxy 7.2.0 through 7.2.12 POC Single Detection ./poc 10.10.1.1 ./poc http://10.10.1.1 1Scan Batch ./1scan 10.10.1.1 ./1scan 10.10.1.1/...

eval-stdin

Util PHP eval-stdin.php CVE-2017-9841 vulnerability is RCE vulnerability in outdated eval-stdin.php. This exploit is just automation for mentioned vulnerability and is still in development. Scripted in Ruby 3.0.4 within 2 hours, tested on Kali linux, Arch Linux, Ubuntu minimal and Termux. How to...

regresshion-check

regresshion-check regresshion-check is a Rust CLI tool to check SSH servers for vulnerability to CVE-2024-6387. It takes in a single IP or multiple IPs/CIDRs separated by newlines in a file. It includes the reverse DNS lookup and version string with any IPs detected as vulnerable. IPs listed in...

CVE-2024-0352

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2024-0352 Run bellow command to check CVE-2024-0352 -h Configurations 2. We integrated with the Telegram API to receive...

prosey

Prosey Prosey is a CLI tool to download and display video transcriptions from YouTube, so you can get the information you're looking for without wasting hours. The main use cases are: Summarize a YouTube video and display it in the CLI with a single command quicker. Read video captions, formatted...

CVE-2026-19650-CVE-2026-19478

cve-id Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example...

hook

hook This is a demo for CVE-2024-32002 POC...

CVE-2021-41773

CVE-2021-41773 A simple bash POC script for Path Traversal & RCE vulnerability in Apache 2.4.49 Example usage: Setup a netcat listener: $ nc -nvlp Then run the script: $ ./exploit.sh Disclamer This tool is for educational purposes only. I hold no responsibility for any misuse...

CVE-2021-3129

CVE-2021-3129 Laravel RCE CVE-2021-3129 Test Environment mkdir CVE-2021-3129-docker cd CVE-2021-3129-docker wget https://raw.githubusercontent.com/vulhub/vulhub/master/laravel/CVE-2021-3129/docker-compose.yml docker compose up -d Usage git clone https://github.com/miko550/CVE-2021-3129.git cd...

PwnedCheck

PwnedCheck PwnedCheck is a command-line tool for checking whether passwords have appeared in known data breaches using theHave I Been Pwned API and supports encrypted Bitwarden vaults exports. Features Check single passwords from the command line Process passwords from a file Accept pre-hashed...

jfrog-CVE-2022-24675

CVE-2022-24675 tools Usage instructions cve202224675.sh rootfolder Will recursively walk the specified folder and report Golang binaries which use pem.Decode function, or are stripped in which case function name will be missed and the check will not be effective...

Integer-Overflow-test

This repository does not have a README...

CVE-2021-21239-Exploit

Detail report below https://docs.google.com/document/d/157fGn7lLP1uBuRz8zUgRDWTDklKznljeOWwRQ-C6uFg/edit?usp=sharing Usage python main.py...

CVE-2022-30190-NSIS

MSDT Patcher, a.k.a. CVE-2022-30190-NSIS This is an NSIS script that helps deploy and roll back the mitigation registry patch for CVE-2022-30190 as recommended by Microsoft. Download the executable here. How does it work? When run, it checks for the presence of the key HKCR\ms-msdt. If the key...

luckystrike

luckystrike A PowerShell based utility for the creation of malicious Office macro documents. To be used for pentesting or educational purposes only. Getting Started 1. Read this: http://www.shellntel.com/blog/2016/9/13/luckystrike-a-database-backed-evil-macro-generator. 2. Read the wiki! 3. Make...

CVE-2023-36143

CVE-2023-36143 PoC of CVE-2023-36143 - Maxprint Maxlink 1200G v3.4.11E Command Injection Steps to Reproduce: 1. Log in the equipment via your web browser 2. Go to the diagnostic tool 3. Insert any ip, e.g 127.0.0.1, the ; character and a command. 4. Example: 127.0.0.1;cat /etc/passwd...

CVE-2023-4863

all credit goes to DARKNAVY's script. This is just a modified version with the OFFSET and VALUE constants added to the top of the file to make it easier to adjust...

cve-2017-1000117

CVE-2017-1000117 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-1000117 Image author: https://github.com/cved-sources/cve-2017-1000117...

kcatcher

Catch what's lurking in your Kafka clusters. Introduction Kcatcher is a command-line utility for enumerating and evaluating Kafka cluster configurations. It connects to Apache Kafka clusters and retrieves detailed information about brokers, topics, ACLs, and even samples messages. Perfect for...

Follina-CVE-2022-30190-Sample

Follina-CVE-2022-30190-Sample-by-ethical-blue Educational Follina Tool Version history v1.1 — JavaScript payload obfuscation v1.0 — Initial release Features .RTF payload generator Simple HTTP Server for payload Mitigation tips Configuration extractor Easy to use for learning Exploit Executed...