seekr

A multi-purpose toolkit for gathering and managing OSINT-Data with a neat web-interface. Introduction Seekr is a multi-purpose toolkit for gathering and managing OSINT-data with a sleek web interface. Our desktop view enables you to have all of your favourite OSINT tools integrated in one. The...

CVE-2026-1337

CVE-2026-1337 - Neo4j - Log Injection Log injection by an authenticated user is possible in the Neo4j query.log when Neo4j is not configured to be in json format. Summary Neo4j does not escape control characters in the metadata field when of a bolt transaction. An autenticated user could send...

satellite

satellite Satellite es un servicio de alojamiento de payloads web que filtra las solicitudes para asegurar que el objetivo correcto recibe el payload. También puede ser un servicio útil para alojar archivos que solo deben ser accedidos en circunstancias muy específicas. Guía de inicio rápido 1...

satellite

satellite Satellite is an web payload hosting service which filters requests to ensure the correct target is getting a payload. This can also be a useful service for hosting files that should be only accessed in very specific circumstances. Quickstart Guide 1. Install satellite on Ubuntu using th...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

below-log-race-poc

below-log-race-poc CVE-2025-27591 Exploit Below privilege escalation Description This repository contains a proof-of-concept exploit for CVE-2025-27591 , a privilege escalation vulnerability in the below utility. The issue arises because below mishandles log files under /var/log/below/, allowing...

DirtyClone

DirtyClone CVE-2026-43503 - PoC en Python Port no oficial de DirtyClone en Python — una vulnerabilidad de escalada de privilegios local del kernel de Linux. Este repositorio contiene un Proof of Concept funcional que permite a un usuario local no privilegiado obtener privilegios de root explotand...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install $ pip install hsecscan Usage $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POST data' -x PROX...

Drupalgeddon2

CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...

dnsx

A fast and multi-purpose DNS toolkit designed for running DNS queries Features • Installation • Usage • Running dnsx • Wildcard • Notes • Join Discord dnsx is a fast and multi-purpose DNS toolkit designed for running various probes through the retryabledns library. It supports multiple DNS querie...

webhandler

WebHandler A handler for PHP system functions & also an alternative 'netcat' handler Info WebHandler tries to simulate a 'Linux bash prompt' to handle and process: - PHP program execution functions e.g. system, passthru, exec, etc - Bind shell connections - Reserve shell connections Another featu...

CVE-2025-0133

CVE-2025-0133 Explotación de CVE-2025-0133 CVE-2025-0133 es una vulnerabilidad de cross-site scripting XSS reflejado en las funciones de gateway y portal de GlobalProtect™ del software PAN-OS® de Palo Alto Networks. Un usuario autenticado con acceso al portal cautivo puede ser engañado para que...

CVE-2021-21551

CVE-2021-21551 Prueba de concepto del exploit para CVE-2021-21551. La vulnerabilidad se debe a que las direcciones proporcionadas por el usuario se pasan como argumentos a una llamada a memmove, lo que permite una lectura/escritura arbitraria ioctls 0x9B0C1EC4 y 0x9B0C1EC8, así como el parámetro ...

go_parser

Yet Another Golang binary parser for IDAPro English |中文 NOTE : Now the latest master branch is the Python3 version. The old master branch has been changed to branch py2 , and temporarily not maintained. Instructions for Python3 branch This version is developed and tested on macOS/Windows, IDA7.4+...

CVE-2020-6287_SAP-NetWeaver-bypass-auth

CVE-2020-6287SAP-NetWeaver-bypass-auth Exploit automatizado para CVE-2020-6287 CVE-2020-6287: SAP NetWeaver AS JAVA LM Configuration Wizard, versiones - 7.30, 7.31, 7.40, 7.50, no realiza una comprobación de autenticación, lo que permite que un atacante sin autenticación previa ejecute tareas de...

Adalanche

Adalanche Open Source Attack Graph Visualizer and Explorer Adalanche gives instant results, showing you what permissions users and groups have in an Active Directory. It is useful for visualizing and exploring who can take over accounts, machines or the entire domain, and can be used to find and...

Go365

Go365 v2.0 Se corrigieron problemas con AWS Gateway ¡gracias h0useh3ad! Ya no falla cuando fallan las conexiones del servidor proxy Se añadió el endpoint graph Por favor, lea todo este README antes de usar Go365! Go365 es una herramienta diseñada para realizar enumeración de usuarios y ataques de...

bmc-tools

BMC-Tools Analizador de caché de mapas de bits de RDP. Entrada bmc-tools procesa archivos bcache.bmc y cache????.bin encontrados dentro de los perfiles de usuario de Windows. Uso ./bmc-tools.py -h -s SRC -d DEST -c COUNT -v -o -b -w WIDTH Con el siguiente significado de los argumentos: -h, --help...

CVE-2023-20198-RCE

Fofa body="window.onload=function url ='/webui';window.location.href=url;" && ishoneypot=false && isfraud=false Uso usage: CVE-2023-20198-RCE.py -h -u URL -p PROXY -au ADDUSER -ap ADDPASS -du DELUSER -pm PRIVILEGEMODE -em EXPLOITMODE -oc OSCMD -cc CLICMD CVE-2023-20198-RCE options: -h, --help sho...

CVE-2023-42793

TeamCity CVE-2023-42793 Exploit This Python script exploits a security vulnerability CVE-2023-42793 in JetBrains TeamCity, allowing an attacker to create a new user with administrative privileges. Usage The script takes either a single TeamCity instance URL or a list of URLs as input. The provide...