CVE-2019-11869

CVE-2019-11869...

ExploitWebmin

Script Webmin Project created by: Gabriel Jose. Python script to exploit webmin vulnerability cve-2006-3392 Example of how to use ./exploitWebmin.py -pt http -t host -p port -f file ./exploitWebmin.py -pt http -t 127.0.0.1 -p 10000 -f /etc/passwd...

CVE-2020-3452

This repository does not have a README...

CVE-2020-10199_CVE-2020-10204

MaiMeng CVE-2020-10199、CVE-2020-10204 Vulnerability Detection Tool Tool Introduction I wrote this small tool in Java in my spare time. It supports one-click detection of CVE-2020-10199 and CVE-2020-10204 vulnerabilities with a graphical interface. To ensure detection stability, random numbers are...

Java-Deserialization-Scanner

Java Deserialization Scanner Java Deserialization Scanner is a Burp Suite plugin aimed at detect and exploit Java deserialization vulnerabilities. It was written by Federico Dotta, Principal Security Analyst at HN Security. The plugin is made up of three different components: 1. Integration with...

heartbleed-checker

heartbleed-checker Check for CVE-2014-0160...

rdg_scanner_cve-2020-0609

Scanning for Remote Desktop Gateways Potentially unpatched CVE-2020-0609 and CVE-2020-0610 The scanner has 2 modes of operation: Check for systems vulnerable to CVE-2020-0609 on UDP 3391 Uses the vuln scan code of https://github.com/MalwareTech/RDGScanner Disclaimer Scanning for memory corruption...

procrustes

Procrustes A bash script that automates the exfiltration of data over dns in case we have a blind command execution on a server where all outbound connections except DNS are blocked. The script currently supports sh, bash and powershell and is compatible with exec style command execution e.g...

fuzzable

Fuzzable Framework for Automating Fuzzable Target Discovery with Static Analysis Introduction Vulnerability researchers conducting security assessments on software will often harness the capabilities of coverage-guided fuzzing through powerful tools like AFL++ and libFuzzer. This is important as ...

CVE-2018-6574-POC

CVE-2018-6574-POC...

HTTPoxyScan

HTTPoxy Exploit Scanner by 1N3 @CrowdShield https://crowdshield.com Last Updated: 20160720 ABOUT: PoC/Exploit scanner to scan common CGI files on a target URL for the HTTPoxy vulnerability. Httpoxy is a set of vulnerabilities that affect application code running in CGI, or CGI-like environments...

CVE-2023-30800_PoC

CVE-2023-30800PoC...

CVE-2019-3396

CVE-2019-3396...

apache__incubator-dubbo_CVE-2021-30181_2-6-8

Apache Dubbo Project Apache Dubbo is a powerful and user-friendly Web and RPC framework. It supports multiple language implementations such as Java, Go, Python, PHP, Erlang, Rust, and Node.js/Web. Dubbo provides solutions for communication, service discovery, traffic management, observability,...

CVE-2022-41404-DoS-Protection

CVE-2022-41404-DoS-Protection Windows Apache Tomcat resource limits implementation guide for CVE-2022-41404 DoS vulnerability protection...

CVE-2020-8888

CVE-2020-8888 test...

log4j-detector

Log4-detector Scanner that detects vulnerable Log4J versions to help teams assess their exposure to CVE-2021-44228 CRITICAL, CVE-2021-45046, CVE-2021-45105, and CVE-2021-44832. Can search for Log4J instances by carefully examining the complete file-system, including all installed applications. It...

imbyter-WinRAR_CVE-2023-38831

💥 WinRAR Vulnerability Description CVE-2023-38831 A spoofable file extension vulnerability exists in WinRAR versions prior to 6.23. Attackers can exploit this vulnerability by crafting specially packaged files that appear harmless, such as JPG .jpg image files, text files .txt, or PDF documents...

CVE-2026-48907

E.L.V CVE Research & Assessment Framework E.L.V — Exploit Loader & Vulnerability Firmware Cybersecurity research utility for authorized vulnerability assessment. Table of Contents Overview Important Safety Notice Project Information What the Current Script Does Workflow Requirements Installation...

ansible-cve-2023-36845

ansible-cve-2023-36845 Simple and untested Ansible Playbook for discovring potential CVE-2023-36845. ansible-playbook -i inventory cve-2023-36845.yml Use the ansible.cfg to limit the output from displaying skipped hosts...