46726 matches found
gobee
gobee Write your BPF programs in Go, not C. gobee transpiles a strict subset of Go into BPF C, generates typed Go bindings for the userspace side, and gates loads against the running kernel. The Go ecosystem has solid userspace tooling for BPF. The kernel side has always ended with "now write you...
manul
Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3 manul.py -i in -o ou...
EasySpider
ęéé/EasySpider: Visual Code-Free Web Crawler äøäøŖå®å Øå č“¹ ļ¼å ę¬åäøä½æēØåäŗꬔå¼å ļ¼ēåÆč§åęµč§åØčŖåØåęµčÆ/ę°ę®éé/ē¬č«č½Æ件ļ¼åÆ仄ä½æēØå¾å½¢åēé¢ļ¼ę 代ē åÆč§åēč®¾č®”åę§č”ä»»å”ćåŖéč¦åØē½é”µäøéę©čŖå·±ę³č¦ęä½ēå å®¹å¹¶ę ¹ę®ęē¤ŗę”ęä½å³åÆå®ęä»»å”ēč®¾č®”åę§č”ćåę¶č½Æ件čæåÆ仄åē¬ä»„å½ä»¤č”ēę¹å¼čæč”ę§č”ļ¼ä»čåÆ仄å¾ę¹ä¾æēåµå „å°å ¶ä»ē³»ē»äøć A completely free including for commercial use and secondary development visual browser automation...
CVE-2024-35468
CVE-2024-35468 Submitter: Kha Do Human Resource Management System 1.0 Vulnerability SQL injection Description SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the password parameters. Affecte...
chusa
chusa: ę³Øå° Chusa - ę³Øå° is an open source penetration testing tool based on SQLmap that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a...
CVE-2026-82329-JFrog-Artifactory-Auth-Bypass
artifactory.py āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā ā artifactory Ā· CVE-2026-82329 unauth admin takeover ā ā mitsec Ā· https://x.com/ynsmroztas ā āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā CVE-2026-82329 ā JFrog Artifactory self-hosted unauthenticated...
EvilRip
Cve-2020-5029-finder It is a small script to fetch out the subdomains/ip vulnerable to CVE-2020-5902 written in bash. Affected Version In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface TMUI, also...
Cisco-UCM-SQLi-Scripts
CVE-2019-15972 Cisco UCM SQLi Scripts Scripts that can be used to exploit CVE-2019-15972 which was an Authenticated SQLi issue in Cisco Unified Call Manager UCM. Enumerate tables - enumerate all tables on the underlying database and place the table names in a text file Extract tables - take the...
Comment2Shell
Comment2Shell Comment2Shell is an end-to-end proof-of-concept for CVE-2026-93485, a pre-authentication stored XSS in WordPress core wpautop that escalates to remote code execution inside an administrator session. An anonymous comment plants the payload; when an admin opens the post, the browser...
dumpguard_bof
DumpGuard BOF Beacon Object File BOF port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems. About This Project This repository contains a Beacon Object File BOF implementation of DumpGuard, ported from the original C/.NET implementation to pure C for use with Havo...
voidaccess
Ask one question. Get a sourced report, a graph you can search, and IOCs you can load. For security researchers, threat-intel teams, MSSPs and authorized investigators. Use it hosted ā voidaccess.pro Ā· Run it yourself āpip install voidaccess Hosted, at voidaccess.pro !Skip the setup...
yara
!IMPORTANT This project is in maintenance mode. More info: https://virustotal.github.io/yara-x/blog/yara-x-is-stable/ YARA in a nutshell YARA is a tool aimed at but not limited to helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malwar...
Exploit-CVE-2019-14287
This repository does not have a README...
cve-2021-3864
Test for CVE-2021-3864. How to run create a user echo ALL= path/to/gen-core /etc/sudoers sysctl kernel.corepattern=core ./cve-2021-3864 It should generate a core file in /etc/logrotate.d...
CVE-2017-16778-Intercom-DTMF-Injection
Invoking DTMF Tones for Physical Access Grant on Fermax Lift Intercom System CVE-2017-16778 Special Mentions First and foremost, @dizijoyjoy for assisting on the demo set in order for a successful shoot. Special acknowledgement to Fermax for the prompt response to the security bug report on their...
Ares
Ares Ares is a Python Remote Access Tool. Warning: Only use this software according to your current legislation. Misuse of this software can raise legal and ethical issues which I don't support nor can be held responsible for. Ares is made of two main programs: A Command aNd Control server, which...
Lenovo-CVE-2025-8061
Lenovo-CVE-2025-8061 PoC for popping a system shell against the LnvMSRIO.sys 3.1.0.36 driver. All credits go to the original author Luis Casvella from Quarkslab. This works against latest Windows 11 Version 24H2 with KVAShadowing and Core Isolation disabled! !NOTE This was compiled using latest...
Zimbra
Active Exploitation of Zimbra CVE-2022-37042 RCE Unauthenticated The following research began by trying to understand the POCs from several GitHub repositories shared by many researchers and ended in an interesting surprise, which I will share in the following paragraphs. On August 10 of this yea...
turbo-intruder
Turbo Intruder Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results. It's intended to complement Burp Intruder by handling attacks that require exceptional speed, duration, or complexity. The following features set it apart: Fast - Turbo...
emba
EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...
CVE-2026-24135
CVE-2026-24135: Arbitrary File Deletion in Gogs via Wiki Path Traversal Severity: High CVSS 7.5 Affected Software: Gogs Patched In: 0.13.4, 0.14.0+dev Advisory: GHSA-jp7c-wj6q-3qf2 Patch: gogs/gogs8099 Summary During a security audit of Gogs a popular self-hosted Git service written in Go, I foun...
CVE-2026-33937
CVE-2026-33937 ā Handlebars.js AST Injection RCE Handlebars.js versions 4.0.0 through 4.7.8 are affected. CVSS score: 9.8 Critical. Overview CVE-2026-33937 is a type confusion vulnerability in Handlebars.js. The Handlebars.compile function accepts both a template string and a pre-parsed AST objec...
cve-2020-11023-demonstration
Jquery XSS - CVE-2020-11023 This is a demonstration of reproducing CVE-2020-11023. Source is mainly from this blog post. Reproduce Install npm dependencies with npm install, jQuery 3.4.1 is included as a dependency. Run the project with for example live server for vs code. The site contains two...
CVE-2023-22515-NSE
CVE-2023-22515-NSE This repository provides a tool to check for the presence of the CVE-2023-22515 vulnerability in Atlassian Confluence Server using the Nmap Scripting Engine NSE. Overview of CVE-2023-22515 CVE-2023-22515 is a critical vulnerability in Atlassian Confluence Server that allows...
CVE-2021-41773
ApacheRCE ApacheRCE is a small little python script that will allow you to input the apache version 2.4.49-2.4.50 and then input a list of ip addresses from a text file and mass run the exploit on them, this can be useful if you are running mutiple websites and you want to see if they can all be...
CVE-2017-9841
This repository does not have a README...
CVE-2022-1597
CVE-2022-1597 The plugin, used as a companion for the Discy and Himer themes, does not sanitise and escape a parameter on its reset password form which makes it possible to perform Reflected Cross-Site Scripting attacks Affected Plugins: WPQA history.pushState'', '', '/' Nuclei Template:...
ServiceCheater
CVE-2020-0108 Foreground Service Privilege Escalation Vulnerability Analysis 1. Vulnerability Background In the AOSP 2020-08 patch, a vulnerability in the framework layer AMS was disclosed, numbered CVE-2020-0108, rated as High. It is a logic vulnerability in AMS's handling of foreground services...
WhoCord
WhoCord An interactive OSINT canvas that grows with every discovery. Start with a seed ā a Discord user, username, email, domain, phone, image, or URL ā and watch the map build itself in real time. Screenshots Gallery: 1 Ā· 2 Ā· 3 | ---|--- | 1. Start page| 2. Canvas with details panel | 3. Multipl...
CVE-2026-27876
šØ CVE-2026-27876 - Grafana Critical RCE via SQL Expressions A chained vulnerability allowing arbitrary file writes through SQL Expressions, leading to full Remote Code Execution RCE on the host. š Overview CVE ID : CVE-2026-27876 Severity : Critical CVSS v3.1: 9.1 Published : March 27, 2026 CWE :...
cve-2025-0133
CVE-2025-0133 Scanner Palo Alto PAN-OS GlobalProtect Reflected XSS vulnerability scanner. Features Single target & mass scanning Multi-threaded configurable Proxy support Burp, ZAP, etc. Colored output with summary Save vulnerable URLs to file Installation Via pip from GitHub pip install...
DHEater
DHEater DHEater is the proof-of-concept implementation of the DHEat attack CVE-2002-20001. It saturates a server's CPU by enforcing Diffie-Hellman ephemeral DHE or elliptic-curve Diffie-Hellman ephemeral ECDHE key exchange over both TLS and SSH. For further information about the attack visit the...
CVE-2018-6389
doser.py DoS tool for HTTP requests inspired by hulk but has more functionalities written in Python: Examples 999 threads sends GET requests: python doser.py -t 999 -g 'https://targeted.site.com' 999 threads sends POST requests with json data: python doser.py -t 999 -p 'https://targeted.site.com'...
CVE-2023-22098
CVE-2023-22098 - Oracle VM VirtualBox 7.0.10 r158379 Escape Hey VM Wizards, In 2023, the outstanding security researcher Andy Nguyen @TheFlow0 discovered multiple vulnerabilities in Virtio-net for VirtualBox. All kudos to him for his incredible work. This repository contains the exploit for...
s3dns
S3DNS s3dns is a lightweight DNS server that helps uncover cloud storage buckets AWS S3, Google Cloud Storage, and Azure Blob by resolving DNS requests, tracing CNAMEs, and matching known bucket URL patterns. It's a handy companion for pentesters , bug bounty hunters , and cloud security analysts...
neurax
A framework that aids in creation of self-spreading software Overview With help of Neurax, Golang binaries can spread on LAN/WAN without using any external servers. Diverse config options and command stagers allow rapid propagation across various wireless environments. Example code package main...
mimikatz
mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. .. mimikatz 2....
CVE-2024-34582
CVE-2024-34582 Affects the latest versions of Mozilla & Chrome Web Browsers, Sunhillo Rici5k & Sureline The most current versions of the Web Servers running on the Sunhillo devices are susceptible to Reflected XSS. The vulnerability lies within the useridchange parameter within /cgi/usrPasswd.cgi...
CVE-2025-67158
CVE-2025-67158 ā Revotech I6032W-FHW Summary The Revotech I6032W-FHW IP camera firmware contains an authentication bypass vulnerability in the /cgi-bin/jvsweb.cgi endpoint. The device does not validate the user.name and user.digest fields included in JSON-based API requests, allowing...
radioguard
RadioGuard: Zero-Trust Cellular Defense Sub-Service for Android RadioGuard is an open-source, production-ready Android security application and background sub-service. It actively detects rogue cell towers IMSI-catchers / Cell-Site Simulators / SMS Blasters, identifies hostile 2G/4G cellular...
com.altamirano.fabricio.tvbrowser
This repository does not have a README...
Docker-Container-CVE-2020-13401
CVE-2020-13401 Study Study on CVE-2020-13401 vulnerability of containers in dockers older than 19.03.11 Containers that are created with Docker Engine versions before 19.03.11 are vulnerable to receive and apply fake RA Router Advertisement messages from other containers in the network. Receiving...
bugz-tools
bugz-tools A collection of tools I wrote for bug bounty or hacking and don't mind publishing it š Donation If my work has been useful for you, feel free to thank me by buying me a coffee or more : Disclaimer All tools here are created to help in penetration testing/bug bounty and not responsible...
CVE-2024-36991
CVE-2024-36991 POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file. Overview This is a bulk scanning and exploitation tool for CVE-2024-36991: Path traversal that affects Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10. This vulnerability was...
canarytokens-docker
Dockerized Canarytokens by Thinkst Applied Research Overview Canarytokens help track activity and actions on your network. If you have any issues please check out our FAQ over here, or create an issue and we'll try to get back to you as soon as possible. Table of Contents Code of Conduct...
frida-ios-hook
Frida iOS hook š A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform. š For Android platform: frida-android-hook š For Intercept Api was encrypted on iOS application: frida-ios-intercept-api Env OS...
CVE-2025-49113-PoC
CVE-2025-49113 Roundcube RCE PoC š How to launch the project 1. Starting the vulnerable server cd Stand docker-compose up -d 2. Running the script against the target cd PoC/src python3 scanner.py --target http://localhost:9000 --username test --password test --command "id" š Key Requirements...
CVE-2023-42793_POC
CVE-2023-42793 Exploit Script Overview This script is designed to automate the exploitation process for the CVE-2023-42793 vulnerability. It targets a specific service presumably affected by this vulnerability and attempts to delete a user token, create a new user token, and then create a new use...
CVE-2017-9805-S2-052
S2-052 POC Usage: python3 struts20179805.py Disclaimer: This script is provided for educational purposes and authorised lab use only. It is intended to demonstrate the Apache Struts S2-052 CVE-2017-9805 vulnerability in controlled environments. You are solely responsible for how you use this tool...