2965243 matches found
PoC-CVEs
PoC || GTFO Proof of Concepts of vulnerabilities...
ntlm-scanner
New! Exploit Scan for CVE-2020-1472 ZeroLogon Scan DCs in your network to detect actual exploitation of CVE-2020-1472 Examples: python scan.py -vuln CVE-2020-1472 -target-file targets.txt python scan.py -vuln CVE-2020-1472 -target Tool works by trying an empty password for DCs every minute. Since...
CVE_2023_44487-Rapid_Reset
CVE-2023-44487 HTTP/2 Rapid Reset Testing Tool - Enhanced Edition A comprehensive Python testing tool for CVE-2023-44487 , the HTTP/2 Rapid Reset vulnerability. This enhanced version provides granular control over testing parameters, multiple attack patterns, and advanced monitoring capabilities...
POC-bomber
🔥 POC-bomber 🦄 POC bomber is a vulnerability detection/exploitation tool designed to quickly gain permissions on target servers by leveraging a large number of high-impact vulnerability POCs/EXPs This project collects various high-impact vulnerabilities from the internet, such as RCE · arbitrary...
wireshark-forensics-plugin
wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...
local-log4j-vuln-scanner
Simple local log4j vulnerability scanner Written in Go because, you know, "write once, run anywhere." This is a simple tool that can be used to find vulnerable instances of log4j 1.x and 2.x in installations of Java software such as web applications. JAR and WAR archives are inspected and class...
gha-lab-f894926966
Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of astronomer/dag-factory at commit...
CVE-2020-0796
CVE-2020-0796 https://hackmd.io/@AWXkSundSBCbyTFFTFC98Q/r1fAaeaH3...
CVE-2021-22204-RSE
CVE-2021-22204-RSE...
cve-2020-14644
cve-2020-14644 cve-2020-14644 Vulnerability Environment...
Blue-Borne
Blue-Borne BlueBorne Exploits & Framework This repository contains a PoC code of various exploits for the BlueBorne vulnerabilities. Under 'android' exploits for the Android RCE vulnerability CVE-2017-0781, and the SDP Information leak vulnerability CVE-2017-0785 can be found. Under 'linux-bluez'...
Serdyuk-DO-homework-CVE-2021-41773
Serdyuk-DO-homework-CVE-2021-41773...
Cyber-Attack-Analysis
Cybersecurity Case Study: The 2020 Virgin Mobile KSA Breach 📌 Executive Summary In 2020, a significant security incident compromised Virgin Mobile KSA, leading to the theft of sensitive data including employee communications and personal information of over 1,000 users. This repository provides a...
Xpsd
OWASP Xpsd One command that decides whether a reported vulnerability is actually reachable in a given source tree. Feed it a CVE description, or a whole vulnerability scan report, and it runs an LLM-driven reachability analysis over your code, then writes structured verdicts, markdown reports, an...
BootHole
BootHole General information This repository was created to contain relevant helpful scripts and any additional tools or information that can assist others in managing their BootHole vulnerability mitigation plans. Windows Based Platforms We have created a Powershell script that will check the EF...
userefuzz
User-Agent , X-Forwarded-For and Referer SQLI Fuzzer made with python Works onlinux and unix based systems Legal Disclaimer Usage of userefuzz for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws...
CVE-2019-0708
Leaving for a wedding tomorrow, if I can't find anything then someone else take the reins Going to drop the crash PoC here Friday if there isnt one public already... Maybe the following week, depending on if the vulnerable numbers drop consistently or not. https://vimeo.com/339425966 I'm not...
fuzzdb
FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses...