DVHMA

DVHMA Damn Vulnerable Hybrid Mobile App DVHMA is an hybrid mobile app for Android that intentionally contains vulnerabilities. Its purpose is to enable security professionals to test their tools and techniques legally, help developers better understand the common pitfalls in developing hybrid...

esp32_esp8266_attacks

ESP32/ESP8266 Wi-Fi Attacks This repository is part of a research outcome from theASSET Research Group. This repository demonstrates 3 Wi-Fi attacks against the popular ESP32/8266 IoT devices: Zero PMK Installation CVE-2019-12587 - Hijacking ESP32/ESP8266 clients connected to enterprise networks;...

XAttacker

XAttacker V2.5 Tool FREE XATTACKER A Massive Exploiting Tool capable of scanning and auto-exploiting vulnerabilities in web applications, By providing a target website to the tool, it auto detects its’ architecture if using a Content Management Service CMS and tries to find vulnerabilities based ...

fuzzable

Fuzzable Framework for Automating Fuzzable Target Discovery with Static Analysis Introduction Vulnerability researchers conducting security assessments on software will often harness the capabilities of coverage-guided fuzzing through powerful tools like AFL++ and libFuzzer. This is important as ...

CVE-2024-3094

CVE-2024-3094 Detectar CVE-2024-3094...

security-audit-skill

security-audit A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impac...

-CVE-2017-10271-

-CVE-2017-10271- CVE-2017-10271Java Deserialization Vulnerability Java Deserialization Vulnerability Exploitation Tool V1.0 A tool for checking vulnerabilities related to Java deserialization, developed using JDK 1.8. The software requires JDK 1.8 or above to be installed...

pisc

Public OCI-Image Security Checker What is it? PISC Public OCI-Image or docker-image Security Checker is command-line tool to assess the security of OCI container images. Exits with code 1 if any of the following conditions are met: malware 🍄 exploits 🐙, hack-tools 👾, backdoors 🐴, crypto-miners 💰,...

log4jshield

Demo • Features • Requirements • Installation • Usage • Contributing • Contact Log4j Shield - fast ⚡, scalable and easy to use finder and patcher No Log4j vulnerability left behind You can use this tool to scan for all JAR files affected by Apache Log4J vulnerability CVE-2021-44228 and patch them...

JavaDeserialization

Java Deserialization Vulnerability Scanner A Java deserialization vulnerability scanner for vulnerabilities similar to CVE-2017-10271. This project currently contains only one PoC; others have not been organized yet. Installation 1. Install nmap ​ https://nmap.org/download.html Download the...

CVE-2020-35391

CVE-2020-35391 Tenda f3 Malformed HTTP Request Header Processing Vulnerability. Run python3 CVE-2020-35391.py --help python3 CVE-2020-35391.py python3 CVE-2020-35391.py -i http://127.0.0.1:8080 python3 CVE-2020-35391.py -l ip.txt Tenda F3 Shodan Dork Exploitation...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

CVE-2019-19781-exploit

CVE-2019-19781-exploit CVE-2019-19781 https://kfi.re/1172.html...

CVE-2025-2135

CVE-2025-2135...

Ethermint-CVE-2021-25837

Ethermint-CVE-2021-25837...

Galaxy-Bugbounty-Checklist

Notes Try to make best Bug Bounty Checklist. All checklists come with references. Feel free to contact me maximus0xday at gmail if you have any question. To do list: Account Takeover CSRF Bypass Http Request Smuggling OSINT OAuth...

CVE-2017-9841

This repository does not have a README...

struts-pwn

struts-pwn An exploit for Apache Struts CVE-2017-5638 Usage Testing a single URL. python struts-pwn.py --url 'http://example.com/struts2-showcase/index.action' -c 'id' Testing a list of URLs. python struts-pwn.py --list 'urls.txt' -c 'id' Checking if the vulnerability exists against a single URL...

Vm4J

Vm4J A tool for detect vmware product log4j vulnerability. How it works? First start a JNDIExploit server. Start this tool and set any config to right setting. Send payload. Screenshot Support VMware HCX VMware vCenter VMware Workspace One Will be add VMware NSX VMware Horizon VMware vRealize...

KoodousFinder

KoodousFinder A simple tool to allows users to search for and analyze android apps for potential security threats and vulnerabilities Account and API Key Create a Koodous account and get your api key https://koodous.com/settings/developers Install $ pip install koodousfinder Arguments Param|...