CVE-2018-11784

Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install CVE-2018-11784 Run bellow command to check CVE-2018-11784 -h Configurations 2. We integrated with the Telegram API to receive...

pFuzz

What is pFuzz / pFuzz Nedir ❓ pFuzz is an advanced red teaming fuzzing tool which we developed for our research. It helps us to bypass web application firewall by using different methods at the same time. pFuzz web uygulama araştırmaları için geliştirdiğimiz, gelişmiş bir fuzzing aracıdır. Farklı...

AzureADAssessment

Microsoft Azure AD Assessment Assessor Guide If you are a Microsoft employee or partner performing the assessment for a customer please see the Wiki for the Assessment Guide. Install from the PowerShell Gallery If you run into any errors please see the FAQ section at the end of this document...

php2shell

██████╗ ██╗ ██╗██████╗ ██████╗ ███████╗██╗ ██╗███...

EUVD-2026-97737

obsidian-tc tokens can access arbitrary configured vaults...

hatiyar

Hatiyar Modern security toolkit for penetration testing, vulnerability assessment, and security research. ⚠️ IMPORTANT: Hatiyar is intended for educational, research, and defensive security use only. Do not use this software on systems you do not own or do not have explicit written permission to...

bios_memimage

biosmemimage RAM imaging utility. Original code by Bill Paul [email protected] https://citp.princeton.edu/research/memory/code/...

wafparan01d3

Quick WAF "paranoid" Doctor Evaluation WAFPARAN01D3 The Web Application Firewall Paranoia Level Test Tool. — Fromalt3kx.github.io -blue.svg Introduction to Paranoia Levels In essence, the Paranoia Level PL allows you to define how aggressive the Core Rule Set is. Reference:...

tilt

Tilt: Terminal Ip Lookup Tool An automatic ip lookup and reverse probing tool for passive reconnaissance ████████╗██╗██╗ ████████╗ ╚══██╔══╝██║██║ ╚══██╔══╝ ██║ ██║██║ ██║ ██║ ██║██║ ██║ ██║ ██║███████╗██║ ╚═╝ ╚═╝╚══════╝╚═╝ Description Tilt: Terminal ip lookup tool, is an easy and simple open...

MalvexC2

!WARNING Work in Progress: This is a WIP side project that is incomplete and insecure! It is only meant to be used as a playground for myself !CAUTION Use at your own risk: Code in this repository might be harmful. Only run and use things you understand! Malvex C2 Welcome to the repository of the...

CVE-2026-58497

Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP. Prior to version 0.225.2, Uni-CLI exposed the legacy JSON-RPC-over-HTTP MCP transport on loopback without validating browser Origin headers before routing requests. A maliciou...

CVE-2021-26295--

CVE-2021-26295-- CVE-2021-26295-POC Use DNSlog for vulnerability verification of CVE-2021-26295. Poc usage: Place the target in target.txt and run python poc.py. JDK environment must be 12, otherwise ysoserial cannot properly generate the payload exp: python exp.py https://baidu.com then enter th...

Modified-CVE-2019-15107

CVE-2019-15107 Make sure to manually change shellperl LHOST and LPORT on line 29 before execution. Modified from: https://github.com/ketlerd/CVE-2019-15107...

Enigma

Enigma Multiplatform payload dropper. VIDEO DEMO CLONE git clone https://github.com/UndeadSec/Enigma.git RUNNING cd Enigma python enigma.py or python3 enigma3.py DISCLAIMER TO BE USED FOR EDUCATIONAL PURPOSES ONLY The use of the Enigma is COMPLETE RESPONSIBILITY of the END-USER. Developer assume ...

EUVD-2026-109090

Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP. Prior to version 0.225.2, Uni-CLI exposed the legacy JSON-RPC-over-HTTP MCP transport on loopback without validating browser Origin headers before routing requests. A maliciou...

CVE-2020-1472

Zerologon modified by Jose Maria Ferreira...

DiscordRAT

DiscordRAT V2 Discord Remote Administration Tool fully written in Python3. This is a RAT controlled over Discord with over 20 post exploitation modules. Disclaimer: This tool is for educational use only, the author will not be held responsible for any misuse of this tool. Setup Guide: You will...

PhoneNumber-OSINT

PhoneNumber-OSINT An OSINT tool for gathering information about phone numbers It was created by Spider Anongreyhat Anonspidey Screenshot How To install PhoneNumber-OSINT on termux: apt update && apt upgrade apt install python3 apt install git apt install pip git clone...

CVE-2026-115477 obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HTTP

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13.0 until 1.31.4, on a Streamable HTTP deployment with auth.jwtSecret configured and a 2026-07-28-era client declaring elicitation.form support, a dispatch-gated tool call offered an inputRequired...

ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...