CVE-2024-50492

🚨 CVE-2024-50492 - ScottCart 🔥 Exploit Script for ScottCart 🧑‍💻 By Nxploit – Khaled Alenazi 📌 Description The ScottCart plugin for WordPress versions ≤ 1.1 is vulnerable to Remote Code Execution RCE. This allows unauthenticated attackers to execute arbitrary PHP functions on the server through a...

Jeeves

Jeeves Usage • Installation Jeeves is made for looking to Time-Based Blind SQLInjection through recon. Contents: Installation Usage Adding Headers Using Proxy Making Post Request Multiple ways of usage - Installation & Requirements: Installing Jeeves 💀 $ go install...

exploit-CVE-2017-7494

SambaCry RCE exploit for Samba 4.5.9 Samba is a free software re-implementation of the SMB/CIFS networking protocol. Samba provides file and print services for various Microsoft Windows clients and can integrate with a Microsoft Windows Server domain, either as a Domain Controller DC or as a doma...

Virtuailor

Virtuailor - IDAPython tool for C++ vtables reconstruction Virtuailor is an IDAPython tool that reconstructs vtables for C++ code written for intel architecture, both 32bit and 64bit code and AArch64 New!. The tool constructed from 2 parts, static and dynamic. The first is the static part, contai...

CVE-2023-28354

CVE-2023-28354 Vulnerability Description A vulnerability has been identified in Opsview Monitor Agent 6.8 that allows an unauthenticated remote attacker to execute arbitrary commands. An unauthenticated attacker can exploit this vulnerability on Windows by supplying an command-line escape sequenc...

Roundcube-CVE-2024-42008-POC

CVE-2024-42008 RoundCube XSS Exploit Overview This repository contains a proof-of-concept exploit for CVE-2024-42008 , a Cross-Site Scripting XSS vulnerability in RoundCube webmail application. This exploit is designed for educational purposes and controlled penetration testing environments like...

ansible_CVE-2016-5195_check

Description Playbook for testing the dirty cow vulnerability CVE-2016-5195. Dependencies local user on the system with sudo priveleges Run ansible-playbook -i host, check.yml -u jondoe -k -K Links http://dirtycow.ninja...

Shellcrypt

Shellcrypt A single-file cross-platform quality of life tool to obfuscate a given shellcode file and output in a useful format for pasting directly into your source code. Contributors These are going here because they deserve it An00bRektn github twitter ♥ 0xtejas github Encryption Methods...

CVE-2018-4879

git clone https://github.com/Sch01ar/CVE-2018-4878.git cd CVE-2018-4878/ python cve-2018-4878.py...

CVE-2021-28476

CVE-2021-28476: a guest-to-host "Microsoft Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. This is a proof of concept for CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", an arbitrary memory read in vmswitch.sys network virtualization service provider patched by Microso...

ATEAM

ATEAM: Azure Tenant Enumeration and Attribution Module A Python reconnaissance tool designed to discover Azure services and attribute tenant ownership information based on their responses. Author, Contributors, and License Authors: Karl Fosaaen @kfosaaen - On most platforms, NetSPI Thomas Elling...

neet

NEET - Network Enumeration and Exploitation Tool Neet is a flexible, multi-threaded tool for network penetration testing. It runs on Linux and co-ordinates the use of numerous other open-source network tools, with the aim of gathering as much network information as possible in clear, easy-to-use...

SSMA

SSMA SSMA is a simple malware analyzer written in Python 3. Features: Analyze PE file's header and sections number of sections, entropy of sections/PE file, suspicious section names, suspicious flags in the characteristics of the PE file, etc. Analyze ELF file for Linux malware analysis, it uses...

RED_HAWK

Version 2.0.0 By R3D@0R2H1N A.K.A Tuhinshubhra All in one tool for Information Gathering and Vulnerability Scanning Scans That You Can Perform Using RED HAWK : Basic Scan Site Title NEW IP Address Web Server Detection IMPROVED CMS Detection Cloudflare Detection robots.txt Scanner Whois Lookup...

user-agent-desktop

This project is discontinued. We recommend to use Ghostery Tracker and Ad Blocker in Firefox. Ghostery Private Browser The Ghostery Desktop Browser is a minimal fork of Firefox optimised for privacy. The main extra features are: The Ghostery Privacy Blocker extension is included and enabled by...

CVE-2026-58138

🚨 CVE-2026-58138 — Unauthenticated Remote Code Execution 🔥 Critical Unauthenticated Remote Code Execution in Conductor Affected versions:3.21.21 → 3.30.2 📌 Overview CVE-2026-58138 is a critical unauthenticated Remote Code Execution RCE...

ActiveMQ-CVE-2023-46604

CVE-2023-46604 ActiveMQ Safe Validator A single-file, non-destructive validator for Apache ActiveMQ CVE-2023-46604. It starts its own HTTP callback server, generates target-specific Spring XML in memory, sends the crafted OpenWire packet, correlates callbacks with unique tokens, and writes CSV/JS...

Apepe

📲 Apepe 📲 Enumerate information from an app based on the APK file 🕵️ What is Apepe? 🕵️ Apepe is a project developed to help to capture informations from a Android app through his APK file. It can be used to extract the content, get app settings, suggest SSL Pinning bypass based on the app detected...

peer-tweet

PeerTweet Decentralized feeds using BitTorrent's DHT. Idea from Arvid and The8472 "DHT RSS feeds" http://libtorrent.org/dhtrss.html Screenshot Quick links Download the latest binaries from the releases page. Find and share PeerTweet addresses from the addresses issues page. What is PeerTweet?...

CVE-2025-45620

Issue details Camera model PTC310UV2 running firmware version 0.1.0000.59. The vulnerability is found in the web interface that is used to access the camera. The vulnerability was found during a penetration test, thus, certain information in the PoC screenshots have been redacted. Description Thi...