wpUsersScan

wpUsersScan About wpUsersScan Enumerate the users list of the wordpress websites through the REST API / CVE-2017-5487,WordPress 4.7.1 - Username Enumeration Usage $ python wpUsersScan.py URL How to install Clone Clone the repository with: $ git clone https://github.com/ihebski/wpUsersScan.git $ c...

owt

Currently unstable will be updated eventually. Offensive Wifi Toolkit owt created by Brennan Mccown clu3bot This tool compiles some necessary tools for wifi auditing in a unix bash script with a user friendly interface. The goal of owt is to have the smallest file size possible while still...

CVE-2023-42793

TeamCity CVE-2023-42793 Exploit This Python script exploits a security vulnerability CVE-2023-42793 in JetBrains TeamCity, allowing an attacker to create a new user with administrative privileges. Usage The script takes either a single TeamCity instance URL or a list of URLs as input. The provide...

CVE-2020-6287-exploit

CVE-2020-6287-exploit PoC for CVE-2020-6287 The PoC in python for add user only, no administrator permission set. Inspired by @zeroSteiner from metasploit. Original Metasploit PR module: https://github.com/rapid7/metasploit-framework/pull/13852/commits/d1e2c75b3eafa7f62a6aba9fbe6220c8da97baa8 Thi...

dirty_sock

dirtysock: Élévation de privilèges Linux via snapd En janvier 2019, les versions actuelles d'Ubuntu Linux se sont révélées vulnérables à une élévation de privilèges locale due à un bogue dans l'API snapd. Ce dépôt contient la POC d'exploit originale, mise à disposition pour la recherche et...

litefuzz

litefuzz Un fuzzer multiplateforme pour sonder les binaires userspace, clients et serveurs. Il a trouvé des bugs dans 50+ applications et bibliothèques de grandes entreprises et open source. Configuration simple pour commencer le fuzzing sur Linux, Mac et Windows. litefuzz intro pourquoi comment ...

TeamsUserEnum

UserEnumTeams Description Sometimes user enumeration could be sometimes useful during the reconnaissance of an assessment. This tool will determine if an email is registered on teams or not. More details on the immunIT's blog Usage .\UserEnumTeams userenum --help Users can be enumerated on...

swap_digger

swapdigger swapdigger is a bash script used to automate Linux swap analysis for post-exploitation or forensics purpose. It automates swap extraction and searches for Linux user credentials, Web form credentials, Web form emails, HTTP basic authentication, WiFi SSID and keys, etc. Download and run...

pwndoc

PwnDoc PwnDoc est une application de reporting de tests d'intrusion qui rend simple et facile la rédaction de vos résultats et la génération d'un rapport Docx personnalisable. L'objectif principal est d'avoir plus de temps pour Pwn et moins de temps pour Doc en mutualisant des données comme les...

CVE-2020-15392

CVE-2020-15392 User Enumeration on Supravizio BPM 10.1.2 Description A user enumeration vulnerability flaw was found in Supravizio BPM, version 10.1.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not,...

EUVD-2026-94373

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected...

gospider

GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO install GO111MODULE=on go install github.com/jaeles-project/gospider@latest Docker...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install $ pip install hsecscan Usage $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POST data' -x PROX...

CVE-2024-27956-RCE

CVE-2024-27956-RCE A PoC for CVE-2024-27956, a SQL Injection in ValvePress Automatic plugin. This PoC exploit the vulnerability creating a user in the target and giving Administrator rights. Being an administrator in wordpress can lead to Remote Code Execution. Usage git clone...

kratos

Chat · Discussions · Newsletter · Documentation · Essayer Ory Network · Emplois Ory Kratos est un système de gestion des identités et des utilisateurs conçu selon une approche API-first pour les applications cloud native. Il centralise les flux de connexion, d'inscription, de récupération, de...

vaas-cve-2014-6271

Уязвимость как услуга - CVE 2014-6271 Система Debian Buster Linux с уязвимой версией bash и веб-приложение для демонстрации CVE-2014-6271, также известного как Shellshock. Обзор Этот docker-контейнер основан на Debian Buster и был изменён для использования уязвимой версии Bash bash4.2:2b:dfsg-0.1...

byp4xx

/ / / // / / / / / / / // /| |// |// / // / // / // / / Quelques options cURL que vous pouvez utiliser par exemple : -L suivre les redirections réponses 30X -x : pour définir un proxy -m pour définir un timeout -H pour de nouveaux en-têtes. Échapper les guillemets doubles. -d pour les données...

EUVD-2026-87369

Actual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub Token...

CVE-2026-46438 wger: Cross-User Data Corruption via Missing Ownership Check on WorkoutLog.slot_entry

wger is a free, open-source workout and fitness manager. Prior to version 2.6, an authenticated attacker can inject arbitrary workout log entries into any other user's SlotEntry by supplying the victim's slotentry ID in a POST /api/v2/workoutlog/ request. The slotentry foreign key is not included...