Minimalistic-offensive-security-tools

Minimalistic TCP and UDP port scanners port-scan-tcp.ps1 | port-scan-udp.ps1 A simple yet powerful TCP and UDP port scanners: Detection of open, closed and filtered ports both TCP and UDP Ability to scan a single host, network range or a list of hosts in a file Adjustable timeout values for...

clroxide

ClrOxide ClrOxide is a rust library that allows you to host the CLR and dynamically execute dotnet binaries. I wanted to call it Kepler for no particular reason, but there's already a package named kepler in cargo. : I have been working on hosting CLR with rust on and off for 2 years now, and...

tulpar

Tulpar is a open source web vulnerability scanner for written to make web penetration testing automated. Tulpar has the following features. -Sql Injection GET Method -XSS GET Method -Crawl -E-mail Disclosure -Credit Card Disclosure -Whois -Command Injection GET Method -Directory Traversal GET...

cve-2014-4322

cve-2014-4322 CVE-2014-4322 Exploit...

CVE-2024-55187

Summary Sensitive administrative parameters are not sufficiently sanitized, allowing an attacker to poison paths to system binaries. The attacker can then upload dangerous CSV files that can then be treated as PHAR archives holding shell metacharacters that will be evaluated by PHP's exec call,...

React2Shell-CVE-2025-55182-TryHackMe

React2Shell-CVE-2025-55182-TryHackMe...

CVE-2024-50498-wpquery

This repository does not have a README...

CVE-2026-0766

CVE-2026-0766: OpenWebUI Remote Code Execution Educational Security Research Repository This repository contains proof-of-concept exploitation code for CVE-2026-0766 , a remote code execution vulnerability in OpenWebUI discovered and published by the Zero Day Initiative ZDI. ⚠️ Disclaimer This...

bof-dnsmasq-cve-2017-14493

bof-dnsmasq-cve-2017-14493...

awesome-termux-hacking

seeker - Accurately Locate Smartphones using Social Engineering. ANDRAX - ANDRAX is a Penetration Testing platform developed specifically for Android smartphones, ANDRAX has the ability to run natively on Android so it behaves like a common Linux distribution, But more powerful than a common...

CVE-2026-31431-Container-Escape

CVE-2026-31431 Container Escape Container escape via runC...

APT-Backpack

APT-Backpack Most common used CVE's by APT, legitimate RAT and other tools used by adversary CVE's CVE-2019-11510 Pulse Connect Secure 8.2 8.3 9.0 Unauth file read CVE-2019-19781 Citrix ADC & Gateway Directory Traversal CVE-2020-5902 F5 Big IP RCE CVE-2021-1497 Cisco HyperFlex HX Unauth Command...

linux-

linux- Modified version CVE-2022-0847 5.8 = Linux kernel 5.16.11 / 5.15.25 / 5.10.102...

CVE-2026-30741

Security Advisory: CVE-2026-30741 Product: OpenClaw Agent Platform Affected Versions: v2026.2.6 and earlier Vulnerability Type: Remote Code Execution RCE via Request-Side Prompt Injection Description: A lack of integrity validation for upstream API requests allows for request-stream poisoning. Th...

CVE-2023-36407

PoC https://github.com/pwndorei/CVE-2023-36407/assets/96749184/15ec3bfd-f3b8-4b35-88af-03b9e5151d88...

threadtear

Threadtear Threadtear is a multifunctional deobfuscation tool for java. Android application support is coming soon Currently working on a dalvik to java converter. Suitable for easier code analysis without worrying too much about obfuscation. Even the most expensive obfuscators like ZKM or String...

WebLogic-RCE-exploit

This repository does not have a README...

hacker-container

Hacker Container Container with all the list of useful tools/commands while hacking Kubernetes Clusters. Read more about it in the blogpost https://blog.madhuakula.com/hacker-container-for-kubernetes-security-assessments-7d1522e96073 List of the tools/commands/utilities available in container are...

log4shell-tools

log4shell.tools log4shell.tools is a tool that allows you to run a test to check whether one of your applications is affected by the recent vulnerabilities in log4j: CVE-2021-44228 and CVE-2021-45046. This is the code that runs https://log4shell.alexbakker.me. If you'd like to inspect the code or...

laforge

Laforge Security Competition Infrastructure Automation Framework Laforge enables rapid development of infrastructure for the purpose of information security competitions. Using a simple and intuitive configuration language, Laforge manages a dependency graph and state management and allows for...