365cam-stream

365Cam Stream Stream your cheap WiFi camera directly to your computer — no app, no cloud, no account needed. Bought a small WiFi camera from AliExpress / Amazon / Temu and it only works through a phone app? This tool lets you view the camera feed directly in your browser over your local network...

crlfmap

CRLFMap CRLFMap is a tool to find HTTP Splitting vulnerabilities Why? I wanted to write a tool in Golang for concurrency I wanted to be able to fuzz both parameters and paths Installation go get github.com/ryandamour/crlfmap Help Available Commands: help Help about any command scan A scanner for...

crlfmap

CRLFMap CRLFMap est un outil pour trouver des vulnérabilités de type HTTP Splitting Pourquoi ? Je voulais écrire un outil en Golang pour la concurrence Je voulais pouvoir fuzzer à la fois les paramètres et les chemins Installation go get github.com/ryandamour/crlfmap Aide Available Commands: help...

Proof-of-Concept-POC---CVE-2026-49975-HTTP-2-Bomb-

CVE-2026-49975 - HTTP/2 Bomb Proof of Concept Description CVE-2026-49975, also known as HTTP/2 Bomb , is a remote denial-of-service DoS vulnerability that affects most major web servers in their default HTTP/2 configuration. The vulnerability was discovered by OpenAI Codex by combining two...

React2Shell

⚛️ React2Shell CVE-2025-55182 Kit d'exploitation avancé pour les Server Actions Next.js CVE-2025-55182. React2Shell est un puissant wrapper de shell interactif conçu pour exploiter la vulnérabilité React2Shell. Il va au-delà du simple RCE en offrant un historique des commandes, des capacités de...

pytmipe

PYTMIPE & TMIPE PYTMIPE مكتبة بايثون لمعالجة الرموز المميزة وانتحال الشخصية لتصعيد الامتيازات هي مكتبة Python 3 لمعالجة رموز Windows وإدارة عمليات الانتحال بهدف الحصول على امتيازات إضافية على Windows. TMIPE هو العميل Python 3 الذي يستخدم مكتبة pytmipe. المحتوى عميل بايثون : tmipe python3 tmipe.py...

flipperzero-firmware

Flipper Zero Firmware Site officiel de Flipper Zero - Un moyen simple d'expliquer à vos amis ce que Flipper Zero peut faire. Mise à jour du firmware Flipper Zero - Des améliorations pour votre dauphin : dernières versions du firmware, outils de mise à niveau pour PC et appareils mobiles...

buyer-eval-skill

Buyer Eval An AI analyst for buying B2B software. Give it the vendors you're considering. Buyer Eval investigates what they claim, checks the evidence, finds the gaps and contradictions, and gives you the questions to ask before you buy. You get a Decision Brief you can forward to everyone else...

zabbix-threat-control

Zabbix Threat Control ztc Turn the Zabbix you already run into a vulnerability-management console. ztc reads each host's software inventory through the stock zabbix-agent2 no extra agent to deploy, audits it against Vulners, and pushes scored, per-host findings — problems, dashboards and CVSS...

CVE-2022-21661-Demo

This repository demonstrates a vulnerability in WordPress 5.8.2, in which missing sanitization in class-wp-tax-query.php can, in very specific situations, allow attackers to perform SQL injection. Note that successful exploitation requires developers to add vulnerable code to the WordPress...

CVE-2019-10685

CVE-2019-10685 The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the "TextField" parameter. Exploit-DB publication at https://www.exploit-db.com/exploits/46804 PacketStorm publication at...

liffy

أداة متطورة لاستغلال ثغرة تضمين الملفات المحلية LFI أداة بايثون قوية لاستغلال ثغرة تضمين الملفات المحلية LFI مع ميزات متقدمة تشمل تجاوز جدار الحماية WAF، وتقنيات الترميز، وكشف شامل للثغرات. Liffy v2.0 هي النسخة المحسّنة بشكل كبير من liffy التي تم إنشاؤها أصلاً بواسطة rotlogix/liffy. تتضمن هذه...

richkit

Richkit Richkit is a python3 package that provides tools taking a domain name as input, and returns addtional information on that domain. It can be an analysis of the domain itself, looked up from data-bases, retrieved from other services, or some combination thereof. The purpose of richkit is to...

richkit

Richkit Richkit هي حزمة بايثون 3 توفر أدوات تأخذ اسم نطاق كمدخل، وتعيد معلومات إضافية حول هذا النطاق. يمكن أن يكون تحليلاً للنطاق نفسه، أو استعلامًا من قواعد البيانات، أو استردادًا من خدمات أخرى، أو مزيجًا من ذلك. الغرض من Richkit هو توفير مكتبة قابلة لإعادة الاستخدام لوظائف التحليل والاستعلام...

py3webfuzz

Py3webFuzz ';-- Python Web Fuzzing module Library Python3 Module Compatible Author Jonathan Angeles @ex0day Github: https://github.com/jangelesg/py3webfuzz Contributors Nathan Hamiel @nathanhamiel DESCRIPTION Based on pywebfuzz, Py3webfuzz is a Python3 module to assist in the identification of...

py3webfuzz

Py3webFuzz ';-- مكتبة وحدة فحص الويب بلغة بايثون متوافق مع وحدة بايثون 3 المؤلف Jonathan Angeles @ex0day Github: https://github.com/jangelesg/py3webfuzz المساهمون Nathan Hamiel @nathanhamiel الوصف بناءً على pywebfuzz، فإن Py3webfuzz هي وحدة بايثون 3 للمساعدة في تحديد الثغرات الأمنية في تطبيقات...

EternalBlueC

EternalBlueC EternalBlue suite remade in C/C++ which includes: MS17-010 Exploit Contains DoublePulsar EternalBlue/MS17-010 vulnerability detector DoublePulsar detector DoublePulsar Upload DLL Doublepulsar Upload Shellcode DoublePulsar Upload DLL with SMB Structure Doublepulsar Upload Shellcode wi...

Gepetto

Gepetto Gepetto is a Python plugin which uses various large language models to provide meaning to functions decompiled by IDA Pro ≥ 7.6. It can leverage them to explain what a function does, and to automatically rename its variables. Here is a simple example of what results it can provide in mere...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

msprobe

msprobe À propos Installation Utilisation Exemples À venir Remerciements À propos Trouver toutes les instances Microsoft sur site pour le password spraying et l'énumération. L'outil utilisera une liste de sous-domaines courants associés à votre domaine apex cible pour tenter de découvrir des...