Steghide-Brute-Force-Tool

Steghide Brute Force Tool Execute a brute force attack with Steghide to file with hide information and password established. How it work Cloning this repo to your computer and typing in your terminal: git clone https://github.com/Va5c0/Steghide-Brute-Force-Tool.git To launch the script by typing:...

TimeException

Disclaimer This tool is provided for educational purposes only. Any actions and activities related to the material contained within this repository are solely your responsibility. Misusing this tool can result in criminal charges against the persons in question. The author will not be held...

cve-scores

CVE Scores EPSS & VEDAS Score Aggregator for CVEs Data Providers SCORE| MAINTAINER| PURPOSE| COVERAGE| ATTRIBUTION| FREQUENCY ---|---|---|---|---|--- Exploit Prediction Scoring System EPSS| Empirical Security| Prediction of Future Exploitation| 1 Identifier CVE| Proprietary Data sourced from Data...

cilium

.. raw:: html |cii| |go-report| |clomonitor| |artifacthub| |slack| |go-doc| |rtd| |apache| |bsd| |gpl| |fossa| |gateway-api| |codespaces| Cilium is a networking, observability, and security solution with an eBPF-based dataplane. It provides a simple flat Layer 3 network with the ability to span...

CVE-2022-37207

CVE-2022-37207 CVE-2022-37207 POC Suggested description JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection Additional Information...

CVE-2025-0288

CVE-2025-0287 This repository contains a screenshot of the vulnerable function identified during reverse engineering of a vulnerable Windows driver. Description biontdrv.sysVul: vulnerable version biontdrv.sysSecure: patched version POCCVE-2025-0288.c: proof-of-concept code diff.png: screenshot o...

CVE-2026-3891

CVE-2026-3891 This tool was created solely for educational purposes, not for criminal activities or anything of the sort. Do not misuse this tool. Good luck trying it out...

EagleEye

EagleEye: With the addition of the -ss option in HTTPX by Project Discovery, it is now possible to create a list of potentially vulnerable URLs with gf xss and qsreplace with the XSS payload, such as alerthacked. HTTPX will then visit all the URLs and take screenshots of them, which are stored in...

Embedded-PDF

Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...

Azur3Alph4

Azur3Alph4 About Azur3Alph4 is a PowerShell module that automates red-team tasks for ops on objective. This module situates in a post-breach RCE achieved position. Token extraction and many other tools will not execute successfully without starting in this position. This module should be used for...

PulseAPK-Core

PulseAPK 🌍 Languages English | Deutsch | Español | Français | עברית | 한국어 | Беларуская | Suomi | Latviešu | Eesti | Lietuvių | Čeština | Slovenčina | Magyar | العربية | Português | Русский | Українська | 中文 PulseAPK is a professional-grade, cross-platform GUI for Android reverse engineering and...

PolinRider

PolinRider: DPRK Threat Actor Implants Malware in Hundreds of GitHub Repos Date: 2026-03-07 Last updated: 2026-04-11 — see April 10–11 Update below Severity: CRITICAL — active supply chain infection across 1,950+ public repositories, confirmed operational merger with the TasksJacker / Contagious...

URS

/\ /\ /'/',\ \ \ \ \ \ //, \ \ /\ \// // // // U niversal R eddit S craper - A comprehensive Reddit scraping command-line tool written in Python. codecov releases Sponsors If this project has saved you time, consider sponsoring its development. | MangoProxy provides residential, ISP,...

CVE-2025-55182

Next.js React Server Components RCE Exploit Exploits CVE-2025-55182 for remote code execution via prototype pollution. Installation uv sync Usage Command Execution source .venv/bin/activate python3 exploit.py -u https://example.com -c "id" Reverse Shell python3 exploit.py -u https://example.com -...

CVE-2024-25169-Mezzanine-v6.0.0

Product: Mezzanine CMS Version: v6.0.0 Date found: 10.01.2024. Date reported: 10.01.2024. Vulnerability type: Incorrect Access Control. CVE ID: CVE-2024-25169 Description: An issue in Mezzanine v6.0.0 allows attackers to bypass access control mechanisms in the admin panel via crafted request. POC...

CVE-2023-45657

CVE-2023-45657 Nexter = 2.0.3 - Authenticated Subscriber+ SQL Injection via 'to' and 'from' Description: The Nexter theme for WordPress is vulnerable to SQL Injection via the 'to' and 'from' parameters in versions up to, and including, 2.0.3 due to insufficient escaping on the user supplied...

skylift

SkyLift V0.4 Will be posted June 15 python3 click easier to use CLI parser workflow fix timestamp SkyLift V0.3 SkyLift is a low-cost geolocation spoofing device. It currently uses the ESP8266 to broadcast WiFi Beacon Frames to exploit a longstanding 2008 vulnerability in WiFi geolocation services...

hacks

/\ /\ \ /\ \ /\ /\ \ /:// /::\ \ /::\ \ /:/ / /::\ \ /::/\ /:::\ /:/:\ /::-"\ /::\ /::/ / /::/ / :\ // ;:;-",-" ::// /:/ / /:/ / :\ |:| | ::/ / // // // || // Some random scripts. Just trying to be like the cool kids. Place all the scripts under /usr/local/bin and hack...

smbcrawler

SmbCrawler SmbCrawler is no-nonsense tool that takes credentials and a list of hosts and 'crawls' or 'spiders' through those shares. Features: takes host names, IP addresses, IP ranges, or an nmap xml file as input checks permissions check for 'write' permissions is opt-in, because it requires...

awesome-web-hacking

awesome-web-hacking This list is for anyone wishing to learn about web application security but do not have a starting point. You can help by sending Pull Requests to add more information. If you're not inclined to make PRs you can tweet me at @infoslack Table of Contents Books Documentation Tool...

GitMiner

⚠️ Repository Deprecated — Project Replaced This repository is no longer maintained and has been officially deprecated. The project continues under active development at: https://github.com/unkl4b/Gitminer3 Please migrate to GitMiner3 to access the latest updates, improvements, and active support...

CVE-2021-46361

CVE-2021-46361: FreeMarker Restriction Bypass in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload. Vendor Disclosure: The vendor's disclosure and fix for th...

CVE-2017-9791

CVE-2017-9791 Metasploit module for Apache Struts CVE-2017-9791 Remote Code Execution Vulnerability...

CVE-2017-8759

Exploit tool CVE-2017-8759 Exploit tool CVE-2017-8759 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit / meterpreter / other payload to victim...

CVE-2024-21412_Water-Hydra

CVE-2024-21412Water-Hydra Deliver malware via CVE-2024-21412 usage Start the services in order, then access the web server. webserver Start a web server in the folder: python -m http.server Initial Access: Use Windows Advanced Query Syntax AQS to link back to a JPEG trojan hosted on a WebDAV shar...

CVE-2019-0232

CVE-2019-0232 Exploit Remote Code Execution RCE in CGI Servlet – Apache Tomcat on Windows Refference : https://wwws.nightwatchcybersecurity.com/2019/04/30/remote-code-execution-rce-in-cgi-servlet-apache-tomcat-on-windows-cve-2019-0232/ Apache Tomcat has a vulnerability in the CGI Servlet which ca...

awscanner

awscanner About Finds internet-exposed resources in an AWS account. Results of the scan will be put in the results folder https://owasp.org/www-project-awscanner/ Installation git clone https://github.com/OWASP/awscanner.git pip install aws-shell cd awscanner pip install -r requirements.txt Usage...

GetLAPSPassword

GetLAPSPassword A feeble attempt at writing a LAPS dumping tool that supports both NTLM and Kerberos auth using the impacket library. Initial structure of this tool was taken from the impacket example GetADUsers.py https://github.com/fortra/impacket/raw/master/examples/GetADUsers.py and the LDAP...

orbitaldump

OrbitalDump A simple multi-threaded distributed SSH brute-forcing tool written in Python. How it Works When the script is executed without the --proxies switch, it acts just like any other multi-threaded SSH brute-forcing scripts. When the --proxies switch is added, the script pulls a list usuall...

machine_learning_security

Machine Learning and Security Source codes about machine learning and security. Line up. Cyber security and Machine Learning course The elementary training course of Machine learning for security engineer. Vulnerabilities of Machine Learning Summary of Machine Learning vulnerability. Analytics...

CVE-2026-48017

CVE-2026-48017 — Remote Code Execution in DbGate via functionName injection Severity : High CVSS 8.8 CWE : CWE-94 — Improper Control of Generation of Code 'Code Injection' Affected : dbgate-api ≤ 7.1.8 patched in 7.1.9 Advisory : GHSA-hv83-ggc4-v385 NVD :...

copyfailscan

copyfailscan Bash helper: discover hosts optional CIDR via nmap, then SSH read-only checks for CVE-2026-31431 Copy Fail / algifaead, CVE-2026-31677 / CVE-2026-43077 AFALG RX heuristics, CVE-2026-23111 nftables + user namespaces, CVE-2026-23102 arm64 SVE/SME. Heuristics only — not an exploit;...

CVE-2023-26469-Jorani

CVE-2023-26469 Exploitation Tool Overview This is a Proof of Concept PoC exploit tool for Jorani 1.0.0, which allows attackers to achieve remote code execution through path traversal and log injection techniques. ⚠️ Warning: This tool is intended for security research and authorized testing only...

GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC

GZDoom = 4.13.1 Arbitary Code Execution via Malicious ZScript A proof of concept for an arbitrary code execution vulnerability I found in GZDoom's https://github.com/zdoom/gzdoom ZScript functionality. An attacker can share a PK3 file containing a malicious ZScript source file and gain access to...

Christmas

Maldev Academy Maldev Academy Home Maldev Academy Syllabus Christmas Implementing an injection method mentioned by @Hexacorn. This PoC creates multiple processes, where each process performs a specific task as part of the injection operation. Each child process will spawn another process and pass...

pybeacon

PyBeacon PyBeacon is a collection of scripts for dealing with Cobalt Strike's encrypted traffic. It can encrypt/decrypt beacon metadata, as well as parse symmetric encrypted taskings Scripts included There is a small library which includes encryption/decoding methods, however some example scripts...

wifi-monitor

wifi-monitor Prints the IPs on your local network that're sending the most packets ack = 802.11 control frame acknowledgement or block acknowledgement req = 802.11 control frame request to send clear = 802.11 control frame clear to send data = QoSData or Data Options: -j: prints new devices that...

server

Hashtopolis LoC Hashtopolis is a multi-platform client-server tool for distributing hashcat tasks to multiple computers. The main goals for Hashtopolis's development are portability, robustness, multi-user support, and multiple groups management. To report a bug, please create an issue and try to...

CVE-2026-5364

CVE-2026-5364 CVE-2026-5364 is a CVSS 8.1 High Unauthenticated Arbitrary File Upload vulnerability in the Drag and Drop File Upload for Contact Form 7 CVE-2026-5364 — CF7 Drag & Drop File Upload RCE Unauthenticated Arbitrary File Upload viasanitizefilename Bypass CVSS 8.1 High | Affected: = 1.1.3...

Android-rce-analizi

CVE Research and PoC Laboratory — Android Security Analysis 👨‍🏫 Advisor Information Name and Surname| Keyvan Arasteh ---|--- GitHub| @keyvanarasteh E-mail| [email protected] LinkedIn| keyvanarasteh Web Site| qline.tech 👤 Student Information Name and Surname| Baha Furkan Yıldız ---|--- Student...

better-poc-for-CVE-2018-15133

Better PoC for CVE-2018-15133 An automated PoC for CVE 2018-15133 All credits goes to kozmic who made the original PoC of CVE 2018-15133 This is just an automation script i made while doing some lab box having this vulnerability because i didnt want to make a new deserialized object with phpggc...

Phisher-man

Phisher-Man2 Samples Phishing tools made for Linux it contains 30 different type of Phishing Pages Requirements made for Linux System if you are using Kali Linux pip install Flask any other Linux distributions pip install Flask apt update sudo apt install apache2 sudo apt-get install xterm usage...

2024

100 Days of YARA 2024 Welcome to 100 Days of YARA! This repository will act as the store for all YARA ideas created during this time. Any fun scripts, tools, or rules you write can be committed to this GitHub repository! For now, any associated blogging, walkthroughs, or other musing can be hoste...

MSSQL-Pentest-Cheatsheet

🗄️ MSSQL Pentest Cheatsheet A practical Microsoft SQL Server penetration testing cheat sheet designed for penetration testers, red teamers, and cybersecurity learners to understand how to enumerate, exploit, and abuse misconfigured MSSQL databases during security assessments. 🌐 Connect With Us 🔵...

DELTA

DELTA: SDN SECURITY EVALUATION FRAMEWORK We now manage DELTA in new repository https://github.com/seungsoo-lee/DELTA. Please visit our new repository and hope you see there again. Thank you! Best Regards, -- DELTA Team...

tgspyder

🕷️ TGSpyder TGSpyder is an Open-Source Telegram OSINT CLI Tool by Darksight Analytics. Features Scrape members list from both public and private groups to CSV Scrape chat messages from both public and private groups to CSV Extract t.me invite links from chat history public and private groups Look...

CVE-2016-3113

CVE-2016-3113 PoC A proof of concept to exploit the reflected XSS vulnerability in the oVirt web interface RedHat. In this PoC a VM in the oVirt IaaS environment is to be started via the victim's browser session. JS code has been kept simple due to the rush. More Info here:...

expluatation_CVE-2022-29078

This repository does not have a README...

tanstack-shield

🛡️ tanstack-shield One-command supply-chain attack scanner for CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx Detects the "Mini Shai-Hulud" worm that compromised 42 @tanstack/ npm packages 84 malicious versions on May 11, 2026. One line — scan your project curl -fsSL...

DirCreate2System

DirCreate2System Weaponizing to get NT AUTHORITY\SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting Short Description: I've discovered comctl32.dll which is missing in system dir which doesn't really exist has been loaded by wermgr.exe via windows error reporting by runnin...