46891 matches found
safe-chain
Aikido Safe Chain ā Block malware on developer laptops and CI/CD ā Supports npm and PyPI more package managers coming ā Blocks packages newer than 48 hours without breaking your build ā Tokenless, free, no build data shared Need protection beyond npm & PyPI? Aikido Device Protection builds on Saf...
cloudsploit
CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...
CVE-2020-9496
CVE-2020-9496 XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03 Install requirements $ pip install -r requirements.txt $ wget https://jitpack.io/com/github/frohoff/ysoserial/master-SNAPSHOT/ysoserial-master-SNAPSHOT.jar -O...
CVE-2020-1472
CVE-2020-1472 CVE 2020-1472 Validation script Assumption: WinRM is enabled between domain controllers. Required permissions: If child domains are present: Enterprise admin If single forest, single domain: Domain admin This script must be run on a primary domain controller with required permission...
gha-lab-51c6b6d0a0
Automated research artifact ā not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at UniversitĆ© Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of parse-community/parse-server at commit...
patriot
Patriot Small research project for detecting various kinds of in-memory stealth techniques. Download the latest release here. The current version supports the following detections: Suspicious CONTEXT structures pointing to VirtualProtect functions. Targets research by Austin Hudson Foliage and Ek...
Prommetrix
Info: Prommetrix is a free software tool to obtain relevant information from the instances of 'Node Exporter' executed by 'Prometheus'. Prometheus is an open-source, metrics-based event monitoring and alerting solution for cloud applications. It is used by nearly 800 cloud-native organizations...
CVE-2022-23277
exchCVE-2021-42321 This article is a tool related to the article "DotNet Security - CVE-2022-23277 Vulnerability Reproduction" by the 7bits Security Team. The authentication part needs to be manually added via Burp Suite. After successful exploitation, it will write 1.aspx to aspnetclient...
msf-module-CVE-2019-0708
CVE-2019-0708 Bluekeep Metasploit module for CVE-2019-0708 BlueKeep Pulled from https://github.com/rapid7/metasploit-framework/tree/5a0119b04309c8e61b44763ac08811cd3ecbbf8d/modules/exploits/windows/rdp and fixed File copy instructions 1. Make a folder named 'rdp' in...
YARAify
YARAify YARAify is an open YARA scan- and search engine. This repository provides some sample python3 scripts on how to interact with the YARAify API. Obtain an Auth-Key In order to query the YARA API, you need to obtain an Auth-Key. If you don't have an Auth-Key yet, you can get one at...
Aliens_eye
ALIENS EYE AI-OSINT Username Scanner Advanced AI-Powered Social Media Username Finder Scan 840+ platforms with ML-blended detection š§ New from the author: lxask lxask is a Linux command assistant that runs entirely on your own machine: describe what you want in plain English and it suggests the...
CVE-2025-2005
CVE-2025-2005 ā Front-End Users Arbitrary File Upload CVE-2025-2005 WordPress Front-End Users ā Unauthenticated Arbitrary File Upload 0xZ3R0 // h4ckxel 0x00 ā Executive Summary Front-End Users is affected by an unauthenticated arbitrary file upload vulnerability affecting versions ā¤ 3.2.32. The...
offensive-one-liners
offensive-one-liners Jean MiƩlot at his desk. Public domain. A notebook of 110 offensive security one-liners for authorized testing, CTFs, bug bounty, and lab research. Organized into one markdown notebook with 12 sections. Each entry is a full command or tight pipeline, not a stub. See...
CVE-2026-83991-WriteUP-and-PoC
CVE-2026-83991-WriteUP-and-PoC...
urlbrute
URLBrute Tool for brute-force directories/DNS on websites Avaliable Modes Directory/File brute-force DNS brute-force Installation Building from Source Install dependencies go get Build executable go build If you want to install in the $GOPATH/bin folder go install Using go get go get...
SecurityNotFound
404 Page Not Found Webshell š¼ Clone me! Clone or download the project: git clone --depth=1 https://github.com/CosasDePuma/SecurityNotFound.git š¦ "Installation" The src/404.php file should be located on the target server and it must have the ability to execute .php files. Here is an example of som...
scannerl
Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...
pgpdump
pgpdump: a PGP packet visualizer Kazu Yamamoto [email protected] August 16, 2010 Overview pgpdump is a PGP packet visualizer which displays the packet format of OpenPGP RFC 4880 and PGP version 2 RFC 1991. Here is an example: % pgpdump test/sig1 Old: Marker Packettag 103 bytes String -...
DeepSleep
DeepSleep A variant of Gargoyle for x64 to hide memory artifacts using ROP only and PIC. Huge thanks to @waldoirc for documenting large parts of this technique on his blog This implementation is different in that it does not make use of any APCs and is fully implemented as PIC. Description I have...
ziti
OpenZiti OpenZiti is an open-source zero-trust networking platform that makes network services invisible to unauthorized users. Every connection, whether from a user, a service, a device, or a workload, is authenticated with cryptographic identity, authorized by policy, and encrypted end-to-end...
quipu
Quipu A desktop workbench for writing, validating, compiling, and testing YARA rules. Quipu pronounced āKEE-pooā brings a project explorer, a YARA-aware editor, the YARA-X compiler, and focused scan results into one local application. It embeds both YARA-X and its language server, so you do not...
Metasploit-Wordpress-Canto-Exploit-RCE
Metersploit exploit module canto RCE CVE-2024-25096 & CVE-2023-3452 This exploit is a proof-of-work exploit of the RFI vulnerabilities CVE-2024-25096 and CVE-2023-3452, which allow the attacker to establish an interactive remote shell session on the target. CVE-2024-25096 abuses the abspath...
import-users-from-csv-with-meta
import-users-from-csv-with-meta Import Users From CSV with Meta 1.15 - Unauthorised Authenticated Users Export...
CVE-2025-29306-PoC-FoxCMS-RCE
CVE-2025-29306 - FoxCMS Remote Code Execution Exploit A Python exploit for CVE-2025-29306, a remote code execution vulnerability in FoxCMS. This tool allows testing single targets or scanning multiple hosts in bulk. Features Single target or bulk scanning capability Multi-threaded for fast scanni...
WPTimeCapsulePOC
Backup and Staging by WP Time Capsule 1.21.16 - Authentication Bypass Proof Of Concept An authentication bypass was recently discovered https://www.webarxsecurity.com/vulnerability-infinitewp-client-wp-time-capsule/ on WP Time Capsule 1.21.16 . This PoC prove how the issue works and how it can be...
slippy-book-exploit
Slippy-book: EPUB File Parsing Directory Traversal Remote Code Execution CVE-2023-44451 Xreader, CVE-2023-52076AtrilReserved: RCE Vulnerability affected popular Linux Distros including Mint, Kali, Parrot, Manjaro etc. EPUB File Parsing Directory Traversal Remote Code Execution A Critical Path...
WebShells
WebShells WebShell studying...
URS
/\ /\ /'/',\ \ \ \ \ \ //, \ \ /\ \// // // // U niversal R eddit S craper - A comprehensive Reddit scraping command-line tool written in Python. codecov releases Sponsors If this project has saved you time, consider sponsoring its development. | MangoProxy provides residential, ISP,...
pacu
Quick reference Where to get help : the Rhino Security Labs Discord, or Stack Overflow Where to file issues : https://github.com/RhinoSecurityLabs/pacu/issues Maintained by : Rhino Security Labs What is Pacu? Pacu is an open-source AWS exploitation framework, designed for offensive security testi...
external_expat-2.1.0_CVE-2022-43680
Expat, Release 2.1.0 This is Expat, a C library for parsing XML, written by James Clark. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in the...
CVE-2026-33439-Python-PoC
CVE-2026-33439 Python PoC Standalone Python proof of concept for the OpenAM pre-authentication remote code execution vulnerability in jato.clientSession deserialization. The embedded shaded Click/Xalan gadget reads a shell command from the cmd HTTP header and returns its output in the HTTP...
CVE-2025-9172
Exploit: Time-Based SQL Injection via /vibes/v1/beacon unauthenticated Browser Console PoC async = const url = 'http://localhost/wordpress/index.php?restroute=/vibes/v1/beacon'; async function sendresource const body = type: 'navigation', resource, // injected into SQL unprepared authenticated: 0...
shellshock-cgi
shellshock-cgi A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server Usage $ python testing.py --server 172.16.255.130 --listen 172.16.255.1 Example Return: + Testing if 172.16.255.130 is vulnerable to CVE-2014-6271 via CGI + Listening for incoming connection...
vboxdie-cracker
Virtual Box Disk Image Encryption password cracker Requirements 1. PHP = 5.5.0 2. OpenSSL = 1.0.1 XTS support Algorithm description User password is stored using a combination of PBKDF2 and AES-XTS as following shown values are fixed at the moment, but they can be controlled inside the file forma...
nosqli
NoSQL Injector A fast NoSQL scanner and injector. For finding sites vulnerable to NoSQL injection, Mongo in particular. About Nosqli I wanted a better nosql injection tool that was simple to use, fully command line based, and configurable. To that end, I began work on nosqli - a simple nosql...
pe-bear
PE-bear PE-bear is a multiplatform reversing tool for PE files. Its objective is to deliver fast and flexible āfirst viewā for malware analysts, stable and capable to handle malformed PE files. Signatures for PE-bear: SIG.txt updated: Oct 17, 2022 - contains signatures fromPEid's UserDB -...
community-scripts
Community Scripts A collection of ZAP scripts provided by the community, i.e. you lot : The easiest way to use this repo in ZAP is to install the 'Community Scripts' add-on from the ZAP Marketplace. !CAUTION While we do review all scripts to ensure they don't do anything obviously malicious, you...
bitchat-android
!WARNING This software has not received external security review and may contain vulnerabilities and may not necessarily meet its stated security goals. Do not use it for sensitive use cases, and do not rely on its security until it has been reviewed. Work in progress. bitchat for Android A secur...
sudowp-crowdsignal-forms
SudoWP Crowdsignal Forms This is a SudoWP security fork of the original Crowdsignal Forms plugin. !WARNING Security Notice : The original "Crowdsignal Forms" plugin versions = 1.7.2 contains a critical Missing Authorization vulnerability CVE-2025-69015 allowing authenticated users to modify polls...
Pluck-Exploitation-by-skdevils
Pluck-Exploitation-by-skdevils Exploit Title: Pluck CMS 4.7.16 - Remote Code Execution RCE Authenticated Date: 13.03.2022 Exploit Author: Ashish Koli Shikari Vendor Homepage: https://github.com/pluck-cms/pluck Version: 4.7.16 Tested on Ubuntu 20.04.3 LTS CVE: CVE-2022-26965...
CVE-2025-32463
CVE-2025-32463 Exploit This is the exploit for the CVE-2025-32463 Thanks to Rich Mirch @0xm1rch on X @ Stratascale for reporting this amazing vulnerability. Original Post: Vulnerability Advisory: Sudo chroot Elevation of Privilege NVD: CVE-2025-32463 CVSS 9.3 Affected Versions Vulnerable builds o...
CVE-2024-24576-PoC-Python
CVE-2024-24576-Poc-Python A quick POC for the vulnerability disclosed here https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ After you run the script it will ask for an arg to be passed to the BAT file. In the screenshot you can see that by adding " the...
CVE-2025-55575
smm-panel-sqliCVE-2025-55575 Time-based SQL Injection Detection for SMM Panel Overview This template detects a time-based SQL Injection vulnerability in the servicedetail parameter of the SMM Panel via HTTP POST requests to /ajaxdata. Exploitation can allow remote attackers to access sensitive da...
CVE-2023-4911
CVE-2023-4911 This is a PoC Proof Of Concept for the Looney Tunables Linux Privilege Escalation vulnerability. This is based on this PoC. Great thanks to leesh3288. Here you can find a very detailed writeup, and here you can see a very cool video by IppSec. Usage Check if it's vulnerable env -i...
firmware-reverse-engineering
Firmware Reverse Engineering Skills Five agent skills from OrbitCurve for firmware extraction, static analysis, Ghidra reverse engineering, emulation, and security reporting, by Hussein Muhaisen. The collection packages the existing workflows, references, templates, and Ghidra scripts for Claude...
js-x-ray
!slsa...
windiff
WinDiff About WinDiff is an open-source web-based tool that allows browsing and comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the operating system. The binary database is automatically updated to include information from the latest Windo...
CVE-2026-25645
CVE-2026-25645 Insecure Temporary File Reuse in requests.utils.extractzippedpaths Executive Summary A vulnerability was identified in the requests library Python within the public utility function requests.utils.extractzippedpaths. The function utilizes a predictable, non-unique filename when...
sudo-vulnerability-CVE-2019-14287
sudo-vulnerability-CVE-2019-14287 Sudo Vulnerability CVE-2019-14287...
CVE-2023-34233_Proof_OF_Concept
Snowflake Connector CVE-2025-24793 PoC This repository contains Proof of Concept PoC code for testing CVE-2025-24793 vulnerability in Snowflake Connector for Python. The project includes both patched and unpatched versions to demonstrate the vulnerability and its fix. Prerequisites Docker install...