2935671 matches found
Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes
Penetration Testing, Beginners To Expert! This guide is designed for both beginners and experienced penetration testers. It covers all aspects of web application penetration testing, including foundational concepts, setting up testing environments with tools such as Burp Suite and bWAPP, and...
CVE-2020-5902
CVE-2020-5902 BIG-IP CVE-2020-5902 Exploit POC and automation scanning vulnerability simple program for exploit big-ip and automation scanning vulnerability install gem install httparty gem install colorize gem install timeout ruby big-ip.rb list.txt output.txt...
S2-045
S2-045 Struts2 S2-045 Vulnerability environment...
BootHole
BootHole General information This repository was created to contain relevant helpful scripts and any additional tools or information that can assist others in managing their BootHole vulnerability mitigation plans. Windows Based Platforms We have created a Powershell script that will check the EF...
Creosote
Creosote Creosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559. The tool recursively traverses the given directory searching for python files. When the tool finds python files it scans them for the tarfile module and then parses the code into an AST to loo...
ban-exploitable-bitcoin-nodes
ban-exploitable-bitcoin-nodes Bloquea todos los nodos explotables por vulnerabilidades de denegaciรณn de servicio en tu nodo CVE-2018-17144 Requisitos para el script bash ban.sh Procesador JSON de lรญnea de comandos jq. Instalaciรณn en Linux basado en Debian sudo apt-get install jq Descargar y usar ...
The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Sn1per
Products Attack Surface Management About Sn1per News Contact Demo Pricing Shop Sn1per โ The Offensive-Security Platform for Modern Teams Recon, scanning, exploitation, and reporting in a single workspace โ whether you're a solo pentester or a global SOC. Sn1per Professional 2026 is here The large...
Nettacker
OWASP Nettacker DISCLAIMER THIS SOFTWARE WAS CREATED FOR AUTOMATED PENETRATION TESTING AND INFORMATION GATHERING. YOU MUST USE THIS SOFTWARE IN A RESPONSIBLE AND ETHICAL MANNER. DO NOT TARGET SYSTEMS OR APPLICATIONS WITHOUT OBTAINING PERMISSIONS OR CONSENT FROM THE SYSTEM OWNERS OR ADMINISTRATORS...
CVE-2017-11882-
CVE-2017-11882 43b original script from https://github.com/embedi/CVE-2017-11882 109b original script from https://github.com/unamer/CVE-2017-11882/ Kudos, now unamer's code can execute shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...
MemShellParty
MemShellParty ไธญๆ | English !WARNING This tool is intended only for security researchers, network administrators, and related technical personnel for authorized security testing, vulnerability assessment, and security auditing. Using this tool for any unauthorized network attack or penetration tes...
Taipan
Taipan is now a sponsored project. The Community sponsor will receive access to the laset version of Taipan Community Edition. The free version is release after three months from the release date. To know more visit: https://github.com/enkomio-sponsor/info or https://taipansec.com. Latest Communi...
apache-flink-directory-traversal.nse
This repository does not have a README...
trivy-db
trivy-db Overview trivy-db is a CLI tool and a library to manipulate Trivy DB. Library Trivy uses trivy-db internally to manipulate vulnerability DB. This DB has vulnerability information from NVD, Red Hat, Debian, etc. CLI The trivy-db CLI tool builds vulnerability DBs. A GitHub Actions workflow...
sentinel-cve
๐ก๏ธ Sentinel โ CVE Explainer CLI "Does this CVE even affect me?" โ answered in seconds, not hours. Sentinel takes a CVE ID, fetches data from NVD, OSV.dev, and MITRE, then uses Claude to produce a clear, actionable 5-section vulnerability briefing. Install cd sentinel/ pip install -e . Configure...
Apache-Druid-CVE-2021-25646
Apache-Druid-CVE-2021-25646 Youtube https://www.youtube.com/watch?v=-mdK5HSRiQU...
optionsbleed
optionsbleed CVE-2017-9798...
smbghost
SMBGhost Scanner CVE-2020-0796 SMBv3 vulnerability scanner SMBGhost. Detects vulnerable Windows hosts by sending a malformed SMBv3 negotiation packet and checking the response. Usage Single host python3 scanner.py -H 10.0.0.5 Host list python3 scanner.py -l targets.txt Network segment python3...
CVE-2022-21661
WordPress CVE-2022-21661 Scanner Usage python wordpressscanner.py -H -p -ssl -proxy -path Help WordPress Scanner for CVE-2022-21661 options: -h, --help show this help message and exit -H HOST, --host HOST Host or IP address -p PORT, --port PORT Port number -ssl, --sslsupport Support SSL/TLS -prox...