46756 matches found
PowerSharpPack
Sponsored by PowerSharpPack Many useful offensive CSharp Projects wraped into Powershell for easy usage. Why? In my personal opinion offensive Powershell is not dead because of AMSI, Script-block-logging, Constrained Language Mode or other protection features. Any of these mechanisms can be...
VMkatz
VMkatz Too Big to Steal You are three weeks into a red team engagement. You land on a NAS attached to the virtualization cluster — hundreds of gigabytes of .vmdk, .vmsn, .sav sitting right there. But your link does 200 KB/s. Exfiltrating a single 100 GB disk would take six days. VMkatz exists...
CVE-2023-37189
CVE-2023-37189 — Issabel PBX 4.0.0-6 Stored Cross-Site Scripting XSS Overview Field| Details ---|--- CVE ID| CVE-2023-37189 Vulnerability| Stored Cross-Site Scripting XSS Affected Product| Issabel PBX 4.0.0-6 Affected URL| index.php?menu=billingrates Vulnerable Fields| Name and Prefix fields in t...
duplicate-CVE-2025-4720-
cve-srms-drop-student-path-traversal CVE-2025-4720dupe Arbitrary File Deletion in SourceCodester SRMS 1.0 Description A path traversal vulnerability exists in the dropstudent.php endpoint of SourceCodester Student Result Management System SRMS 1.0. The application takes user-controlled input from...
By-Poloss..-..CVE-2026-7515-PoC
CVE-2026-7515: BetterDocs Pro views-get"layouts/encyclopedia/$docstyle", 'doc' = $doc, 'excerpt' = $excerpt, 'dictionarylearnmoretext' = $learnmoretext, 'itemheadingtag' = $itemheadingtag,...
fileintel
fileintel This is a tool used to collect various intelligence sources for a given file. Fileintel is written in a modular fashion so new intelligence sources can be easily added. Files are identified by file hash MD5, SHA1, SHA256. The output is in CSV format and sent to STDOUT so the data can be...
PY-Log4j-RCE-Scanner
Log4j RCE Scanner Using this tool, you can scan for remote command execution vulnerability CVE-2021-44228 on Apache Log4j at multiple addresses. Features: It can scan according to the url list you provide. It can scan all of them by finding the subdomains of the domain name you give. It adds the...
DDexec
DDexec news I have updated DDexec so much it is barely recognizable, the parsing of the ELF is now done by machine code instead of by the shell script, making it far faster, reliable and comprehensible. It has also reduced its number of dependencies to the absolute minimum. It also now barely...
Pocsuite
This project has stopped to maintenance, please to https://github.com/knownsec/pocsuite3 project. Pocsuite Overview Pocsuite is an open-sourced remote vulnerability testing and proof-of-concept development framework developed by the Knownsec 404 Team. It comes with a powerful proof-of-concept...
mquery
mquery: Blazingly fast Yara queries for malware analysts Ever had trouble searching for malware samples? Mquery is an analyst-friendly web GUI to look through your digital warehouse. It can be used to search through terabytes of malware in a blink of an eye: Under the hood we use our UrsaDB, to...
POC-CVE-2026-58048
CVE-2026-58048 CVSS 4.0: 9.4 Critical | CWE-89: SQL Injection | NVD Authenticated cPanel user → arbitrary SQL as MySQL root via database rename. cPanel improperly preserves the user's session sqlmode ANSIQUOTES when executing rename operations as root — a backtick in the database name breaks out ...
vuln-chain-lab
File Upload Bypass + Stored XSS PoC Lab A deliberately vulnerable web application demonstrating how a file upload bypass chains with stored XSS to create backdoor admin accounts, even when CSP, CORS, and CSRF protections are in place. Full Blog Post: KurtiseBear Blog This is an educational lab fo...
PoC---CVE-2023-26482-RCE-LAB-Nextcloud
Next cloud Proof of Concept & Analysis Security Notice This repository reproduces a publicly disclosed and patched vulnerability in a controlled Docker lab environment for educational and research purposes. The environment is intentionally vulnerable and must only be deployed in isolated test...
nrf24-injection
A tool set for sniffing devices and launching attacks with Crazyradio. Based on BastilleResearch's research. Setting Up Install additional modules sudo apt-get install sdcc binutils python python-pip sudo pip install -U pip sudo pip install -U -I pyusb sudo pip install -U platformio Supported...
trevorc2
trevorc2 TrevorC2 - Command and Control via Legitimate Behavior over HTTP Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Note that this is a very early release - heavy randomization and encryption to be added soon. TrevorC2 is a client/server model for masking command a...
Information-Security
Information-Security Information Security Resource Compilation...
Mystikal
Mystikal macOS Initial Access Payload Generator Intended to be used with https://github.com/its-a-feature/Mythic Related Blog Post: https://posts.specterops.io/introducing-mystikal-4fbd2f7ae520 Usage: 1. Install Xcode on build machine Required for Installer Package w/ Installer Plugin 2. Install...
Stuxnet
Stuxnet This repository contains a strictly educational and research-oriented reconstruction of the infamous Stuxnet worm. It is the product of countless hours of reverse engineering work conducted by the global security research community on the original binary samples discovered in 2010. Warnin...
malicious-pdf
Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...
CVE-2023-40028
CVE-2023-40028 Exploit for CVE-2023-40028 for educational purposes Built for HTB machine LinkVortex Usage python3 exploit.py Then enter the file path you want to read e.g., /etc/passwd. Type exit to quit...
phpinfo-files-leaks
Badges License MIT Installation 1. Install Python3 and pip Instructions Here If you can't figure this out, you shouldn't really be using this Install via pip pip install phpinfo-file-leaks Run bellow command to check phpinfo-file-leaks -h Configurations 2. We integrated with the Telegram API to...
CVE-2023-21716
CVE-2023-21716 — Microsoft Word RTF fonttbl Heap Corruption RCE Severity: Critical CVSS 9.8 Affected: Microsoft Word 2013 / 2016 / 2019 / 2021 unpatched Patch: Microsoft February 2023 Patch Tuesday Author: REGGYRAIDER Vulnerability Overview CVE-2023-21716 is a heap corruption vulnerability in...
CVE-2019-11447-EXP
CVE-2019-11447-EXP CuteNews Avatar 2.1.2 Remote Code Execution Vulnerability Before run the python script, run the nc command firstly. The default port is 1234. Then execute exploit.py, follow the tips and input required contents...
xbootEncodePwd
xbootEncodePwd xboot-activiti-1.0-SNAPSHOT xboot-cms-1.0-SNAPSHOT xboot-generator-1.0-SNAPSHOT xboot-app-1.0-SNAPSHOT xboot-core-1.0-SNAPSHOT xboot-open-1.0-SNAPSHOT xboot-autochat-1.0-SNAPSHOT xboot-docking-1.0-SNAPSHOT xboot-quartz-1.0-SNAPSHOT xboot-base-1.0-SNAPSHOT xboot-ems-1.0-SNAPSHOT...
lpc_sniffer_tpm
TPM Specific lpc sniffer low pin count for ice40 stick Turn the ice40 stick into a LPC sniffer, only logging TPM specific messages. This repository is a duplicate of https://github.com/lynxis/lpcsniffer/, with modifications made to only log messages with start field 0101 and address between 24 an...
Python-Honeypot
OWASP Honeypot OWASP Honeypot is an open-source software in Python language which designed for creating honeypot and honeynet in an easy and secure way! This project is compatible with Python 3.x and tested on Mac OS X, and Linux. We appreciate any contribution, ideas, feedback. feel free to...
exim-cve-2019-10149-data
Exim CVE Data Collection Data Collection Related to Exim Vulnerabilities CVE-2019-10149, CVE-2019-15846, CVE-2019-16928 CVE Announcement: https://vulners.com/cve/CVE-2019-10149 Exploit Details: https://www.exploit-db.com/exploits/46974 Issue Timeline: https://seclists.org/fulldisclosure/2019/Jun/...
CVE-2025-55182
CVE-2025-55182 This vulnerability allows RCE in React Server Functions, e.g. as offered by Next.js through insecure prototype references. I'm not an expert in React or Next.js, so take all the information here with a grain of salt. Background React offers Server Functions^1, which can be seen as...
CVE-2026-49777
This repository does not have a README...
CVE-2025-14847_Expolit
MongoBleed-Pro ☠️ Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with Alexcyberx 🔥 About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...
CVE-2026-73570
CVE-2026-73570 — Zimbra Collaboration Suite RCE Note: This repository contains an independent technical analysis and PoC reproduction of CVE-2026-73570. It is not the original vulnerability report. Zimbra Collaboration Suite RCE — SMTP log poisoning → swatchdog → OS Command Injection CVSS 8.9, CI...
AntiCheat-Testing-Framework
AntiCheat-Testing-Framework Framework to test any Anti-Cheat on the market. This can be used as Template or Code Base to test any Anti-Cheat and learn along the way. The entry level to reverse AntiCheats and Cheats is quite high, therefore, I'm realeasing all the code I developed during my...
whalescan
Whalescan Vulnerability scanner for windows containers. Getting Started git clone https://github.com/saira-h/whalescan pip install -r requirements.txt python main.py Overview Whalescan performs several benchmark checks, as well as checking for CVEs. This tool can be used as part of a windows...
CMSmap
CMSmap CMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs. The main purpose of CMSmap is to integrate common vulnerabilities for different types of CMSs in a single tool. At the moment, CMSs supported by CMSmap are WordPress,...
ALLMediaServer-1.6-Buffer-Overflow
CVE-2022-28381 ALLMediaServer 1.6 Remote - Buffer Overflow SEH ALLMediaServer-1.6-Buffer-OverflowMetasploit Proof and Exploit References https://nvd.nist.gov/vuln/detail/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381...
IP-Tracer
IP-Tracer IP-Tracer is used to track an ip address. IP-Tracer is developed for Termux and Linux based systems. you can easily retrieve ip address information using IP-Tracer. IP-Tracer use ip-api to track ip address. How to install IP-Tracer ? apt update apt install git -y git clone...
pingcastle
PingCastle by Netwrix Stay Connected & Contribute We welcome all PingCastle users: open source contributors, IT admins, and security professionals, to get involved and help shape the future of PingCastle. Join the Netwrix Community : community.netwrix.com Get announcements, view the roadmap, subm...
CVE-2026-2699
CVE-2026-2699 — Progress ShareFile Storage Zones Controller Authentication Bypass Critical Authentication Bypass CVSS 9.8 in customer-managed Progress ShareFile Storage Zones Controller SZC ≤ 5.12.3. 📋 Overview CVE-2026-2699 is a severe authentication bypass vulnerability affecting the web...
cs50-cybersecurity-final-project
Technical Analysis of CVE-2024-3094: XZ Utils Supply Chain Backdoor Video Demo: https://youtu.be/3xBtabSkusE?si=ChN3nBgybK4nqNLz Description: An in-depth technical and architectural breakdown of CVE-2024-3094 CVSS 10.0 Critical, the historic open-source supply chain backdoor embedded into xz-util...
CVE-2018-9995-POC
CVE-2018-9995-POC CVE-2018-9995 POC python CVE-2018-9995Bata.py -proxy 127.0.0.1:9487 -f Importdata.txt -o Outputdata.txt -p 12 -f ※Batch import file Data source format example: 43.255.172.204:9200 192.168.168.5:1234 -o ※Output file -proxy ※Socks5 forwarding proxy -p ※Number of multi-threaded cor...
CVE-2018-10949
Zimbra Collaboration User Enumeration Script CVE-2018-10949 How to use The argument --host must be the hostname or IP address of Zimbra Collaboration Web Application root page, and --userlist an list of usernames to check against it. root@kali ./cve-2018-10949-user-enum.py --host...
Simple-Live-Data-Collection
Simple Live Data Collection Tool How it works? 1- Build server 2- Connect with admin and client to server 3- To collect information, send the request to the server through the admin, and then to the client Installation git clone https://github.com/LetsDefend/Simple-Live-Data-Collection Server cd...
binary-cartography
Binary Cartography Technical webinars on reverse engineering, malware analysis, and software protection. This repository hosts materials for Binary Cartography , Tim's independent webinar series on binary security. The focus is practical reverse engineering, malware analysis, and software...
Cybersecurity-Mastery-Roadmap
🛡️ Ultimate Cybersecurity Mastery Roadmap A comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance 📋 Table of Contents Introduction How to Use This Roadmap Roadmap Overview Foundation Phase Technical Skills Phas...
CVE-2019-11043
CVE-2019-11043 quick and dirty PHP RCE proof of concept...
CVE-2025-55182-GUI
CVE-2025-55182 Vulnerability Detection and Exploitation Tool GUI Version Project Overview This project is a graphical detection and exploitation tool targeting the high-risk CVE-2025-55182 vulnerability, developed with Python + tkinter to provide a fully graphical interface. It eliminates the nee...
CVE-2024-3094
This repository does not have a README...
CVE-2022-1388-Exploit
CVE-2022-1388-Exploit Test and Exploit Scripts for CVE 2022-1388 F5 Big-IP masscheck.py will take a file input and check the hosts are vulnerable without exploiting them. Detection: Scanning for /mgmt/tm/util/bash as an endpoint, likely to be in web server logs. Or if you have a F5 go patch it, t...
CVE-2019-19781
CVE-2019-19781 Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway CVE-2019-19781 Usage : bash CVE-2019-19781.sh IPOFVULNURABLEHOST COMMANDTOEXECUTE e.g : bash CVE-2019-19781.sh XX.XX.XX.XX 'cat /etc/passwd'...