foxpwn

Foxpwn Proof-of-Concept exploit for CVE-2016-9066. Find a detailed writeup here...

PhEmail

PhEmail PhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test. The main purpose of PhEmail is to send a bunch of phishing emails and prove who clicked on them without attempting to exploit the web browser or...

admin-panel-finder

admin-panel-finder A Python Script to find admin panel of a site...

CVE-2020-13942

CVE-2020-13942 Run httpx or httprob on the targets before using the script. USAGE ./CVE-2020-13942.sh target.txt Credit This script was made from Rohit Gautam Repo...

hostscan

hostscan 0.2 Hostscan is a php tool which allows you to scan specific range of hosts, mostly for information gathering and testing for weak passwords. I guess it's a pentest tool, i'd created it to automate some tests that i often do. Since it's PHP, it works quite slowly compared to client-side...

cwe-tool

cwe-tool A command line CWE discovery tool based on OWASP / CAPSEC database of Common Weakness Enumeration. Official OWASP CWE Toolkit Page Install Executable with Node.js tooling If you have a Node.js environment, you can invoke cwe-tool using the npx tool as follows: npx cwe-tool ...command-lin...

TransparentTorProxy

A Linux CLI tool that transparently routes all system traffic through the Tor network using nftables. Features • Requirements • Installation • Usage • How It Works • Verification • Contribute No per-application setup needed - just sudo ttp start and every connection goes through Tor. !CAUTION TTP...

dotdotslash

dotdotslash An tool to help you search for Directory Traversal Vulnerabilities Benchmarks Platforms that I tested to validate tool efficiency: DVWA low/medium/high bWAPP low/medium/high Screenshots Instalation You can download the last version cloning this repository git clone...

Next.js-Exploit-Tool

Next.js-Exploit-Tool Next.js-Exploit-Tool 图形化综合利用工具。 简介 一款针对 CVE-2025-55182 的独立安全评估工具，基于 Go 开发，提供图形化界面（GUI），用于快速完成漏洞检测与验证。 更新日志 v1.3.0 新增 Godzilla 哥斯拉 内存马支持 实现了基于 Node.js 的 Godzilla 内存马注入功能，本 Payload 需配合北辰师傅的项目GodzillaNodeJsPayload 使用。 致谢 Credits ：特别感谢 北辰师傅开源的 GodzillaNodeJsPayload 项目。 新增网络代理支持...

ICSFuzz

ICSFuzz: Fuzzing Tool for ICS Control Applications Overview ICSFuzz is an PLC-side fuzzing tool for uncovering vulnerabilities in ICS control applications by Dimitris Tychalas @ditihala .. @ditihala: https://www.twitter.com/ditihala Installation The tool requires an already existing cross...

brutas

brutas Wordlists handcrafted and automated with ♥ A random passwords sample: 1qaz2wsx | panel197111 | @bcd1234 | Root!22020 1q2w3e4r5t6y | catalog841@@ | Zaq@$m,. | 1Qazxsw@222 qwerty12345 | Asdzxc129191 | testguest | User@$12@ password123 | qwerty!@12345 | Guest1120 | ?99998888? 123321! |...

subzy

Subzy Subdomain takeover tool which works based on matching response fingerprints from can-i-take-over-xyz Installation go install -v github.com/PentestPad/subzy@latest If $GOBIN and $GOPATH are properly set, execute the program as: $ subzy --help Subdomain takeover tool Usage: subzy command...

fprobe

FProbe FProbe - Fast HTTP Probe Installation GO111MODULE=on go get -u github.com/theblackturtle/fprobe Features Take a list of domains/subdomains and probe for working http/https server. Optimize RAM and CPU in runtime. Support special ports for each domain Verbose in JSON format with some...

CVE-2021-31956-EXP

Working in WIN10 1903 Not a perfect exp https://bbs.pediy.com/thread-271140.htm...

CloudHunter

This repository does not have a README...

Mandiant-Azure-AD-Investigator

Mandiant Azure AD Investigator Focusing on UNC2452 TTPs Overview This repository contains a PowerShell module for detecting artifacts that may be indicators of UNC2452 and other threat actor activity. Some indicators are "high-fidelity" indicators of compromise, while other artifacts are so calle...

CVE2PoC

CVE2PoC CVE2PoC is a tool that helps penetration testers, bug hunters, and security researchers quickly find public exploits, Proof-of-Concepts PoCs, and advisories related to a CVE ID. Table of Contents Features Installation Usage Public Exploits Finding Report Generation CVE Description...

CVE-2024-23692

CVE-2024-23692 Usage: go run hfs.go -h go run hfs.go -u http://127.0.0.1 go run hfs.go -u http://127.0.0.1 -dns // default uses ceye.io requires configuration go run hfs.go -u http://127.0.0.1 -dns -d abc.cn // specify dnslog go run hfs.go -u http://127.0.0.1 -cmd // enter command line Tips: DNSL...

fatcat

fatcat This tool is designed to manipulate FAT filesystems, in order to explore, extract, repair, recover and forensic them. It currently supports FAT12, FAT16 and FAT32. Tutorials & examples Building and installing You can build fatcat this way: mkdir build cd build cmake .. make And then instal...

mass-bruter

Mass Bruter Mass bruteforce network protocols Info Simple POC to quickly mass bruteforce common services in a large scale of network. It will check for default credentials on ftp, ssh, mysql, mssql...etc. This was made for authorized penetration testing purpose only. How it works 1. Use...