log4j-rce-CVE-2021-44228

Resumen Este es un proyecto para probar la vulnerabilidad de ejecución remota de código de log4j2 CVE-2021-44228. Iniciar los contenedores docker-compose up El contenedor log4j tarda un poco en estar listo después de iniciarse. Verifique el progreso con el siguiente comando: docker logs -f log4j...

DVIA-v2

DVIA-v2 Powered by 8ksec.io DVIA-v2 written in Swift along with additional vulnerabilities Damn Vulnerable iOS App DVIA is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration...

MSF-Testing-Scripts

Metasploit Module Testing Scripts This repo contains code required to test some of the Metasploit modules I've helped write. brocadeemulator.py Metasploit Module: auxiliary/scanner/telnet/brocadeenablelogin juniperssg5emulator.py Metasploit Module: auxiliary/scanner/ssh/juniperbackdoor.rb Also se...

CVE-2026-70463

CVE-2026-70463 Testing CVE-2026-70463 by Fyyre For research and educational purposes only!...

heartthreader

Heartthreader Porque las pruebas manuales de vulnerabilidades son tediosas. ¡Solo añade un poco de salsa mágica de multithreading!...

redash-vulnerable

redash-vulnerable 🐛 Una instancia de Redash dockerizada que es vulnerable a CVE-2021-21239 según lo escrito por Calif. Uso 💻 Iniciar el servidor preservando datos script/server Esto iniciará el servidor Redash usando Docker Compose en modo detached, preservando cualquier dato existente. El servid...

llm-agent-testbed

🛡️ LLM Agent Security Testbed Empirical Vulnerability & Defense Harness for Tool-Calling LLM Agents A disciplined security testbed testing whether tool-equipped LLM agents can be manipulated into unauthorized data exfiltration via prompt injection, role-claim social engineering, and confused-deput...

CVE_Demo

CVEDemo Hi, This is Muhammad Navaid Zafar Ansari, I have created this repository to maintain my CVE demos and give the fix recommendation to those people who want to use these applications where I found the vulnerabilities. Disclaimer: All the demo's are created only for educational purpose, Do...

bleed

bleed bleed es una herramienta para probar servidores en busca de la vulnerabilidad 'Heartbleed' CVE-2014-0160. Uso $ bleed example.org Connecting... Sending Client Hello Waiting for Server Hello... Sending Heartbeat request Unexpected EOF receiving record header. Server closed connection. No...

apache-vulnerability-testing

Herramienta de Prueba de Vulnerabilidades del Servidor Apache HTTP Este repositorio proporciona una Prueba de Concepto PoC para probar diversas vulnerabilidades en el Servidor Apache HTTP, incluyendo Ataques de Confusión de Nombres de Archivo, SSRF, Denegación de Servicio y otras relacionadas con...

akto v2.32.5

Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...

cam-hunter

📡 CAM HUNTER — Advanced DVR / NVR / XVR Security Testing Frame...

Exploit for Code Injection in Vmware Spring_Framework

Spring4Shell Local Exploitation Conditions Verification, Remed...

websec-skills

websec-skills Web Security Vulnerability Testing Skills Set,...

Exploit for Improper Input Validation in Paloaltonetworks Pan-Os

CVE-2024-3400 This program was improved upon to include a safe...

Hunting-Bugs

2026 Practical Bug Bounty Guide Built on real-world experie...

Luban-2040-v2

🛡️ Luban 2040 v2 Advanced Reconnaissance & Vulnerability...

Exploit for CVE-2020-1938

Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 Vulnerabilit...

Exploit for CVE-2026-31431

This script is entirely genera...

API Security Testing and Vulnerability Assessment

APIs now carry more sensitive data than traditional web interfaces. Payment details, health records, authentication tokens, and customer databases all flow through API endpoints that attackers can probe without ever touching a browser. A single misconfigured endpoint can expose millions of record...