45743 matches found
Insta-Crawler
Insta Crawler A python script designed to generate a random instagram pictures ids and try it Screenshot...
ofp_sniffer
OFPSniffer is an OpenFlow sniffer to be used for troubleshooting and learning purposes. Currently on version 1.2, it dissects all OpenFlow 1.0 messages, works with InfluxDB, Grafana, and Slack. OpenFlow 1.3 will be available on OFPSniffer version 1.3 to be released soon. It works directly on Linu...
collateral-damage
Collateral Damage Collateral Damage is a kernel exploit for Xbox SystemOS using CVE-2024-30088. It targets Xbox One and Xbox Series consoles running kernel versions 25398.4478, 25398.4908, and 25398.4909. The initial entrypoint is via the Game Script UWP application. The first stage payloads, PE...
sunlogin_rce
Foreword Nothing much to say, I'll just put the tool and the vulnerable version here. It's great for local testing, but do not use it for illegal tests. Tested Sunflower client vulnerable version: 11.0.0.33162 The vulnerable client is provided in the source code. Port scanning uses:...
nanoclaw
An AI assistant that runs agents securely in their own containers. Lightweight, built to be easily understood and completely customized for your needs. nanoclaw.dev • docs • 中文 • 日本語 • 한국어 • • Agents in Slack: one app per agent Setup provisions each agent its own Slack app: manifest, avatar, and...
CVE-2020-15999
CVE-2020-15999 Here you will all the resources in order to execute the PoC for the CVE-2020-15999 in Google Chrome and Ftview Ubuntu. There are two folders in this repository, one for each program. Google Chrome In order to reproduce the exploit you will have to install a Google Chrome version...
CVE-2022-22954_VMware_PoC
CVE-2022-22954 PoC - VMware Workspace ONE Access Freemarker Server-Side Template Injection A vulnerability, which was classified as very critical, was found in Vmware Workspace ONE Access and Identity Manager. Affected component is Template Handler. Reference: https://vuldb.com/?id.196644 Usage:...
pulsexploit
pulsexploit Automated script for Pulse Secure SSL VPN exploit CVE-2019-11510 using hosts retrieved from Shodan API. You must have a Shodan account to use this script. Click here if you don't have Shodan account. Installation 1. Install dependencies. CentOS & Fedora yum install git python3 -y Ubun...
ChangeTower
ChangeTower ChangeTower is intended to help you watch changes in web pages and get notified of any changes written in Go. This tool is good to know the web pages are updated something or not to work on the new site before others Installation Instructions ChangeTower requires go1.16+ to install...
xtride
XTRIDE: N-gram-based Practical Type Recovery Introduction We present XTRIDE, an improved n-gram-based cf. STRIDE approach on type recovery for binaries that focuses on practicality: highly optimized throughput and actionable confidence scores allow for deployment in automated pipelines. When...
XboxSeries
Xbox Series: Internal Architecture Research Field| Value ---|--- Date| March 9-12, 2026 + July 7-?, 2026 Hardware| Xbox Series S Codename: Lockhart OS Build| 26100.7010.amd64fre.xbflt2602ge.260212-1010 + 26100.8561.amd64fre.xbflt2606ge.260609-2200 Access Method| Dev Mode + SSH + REST API + NTFS...
TokenTactics
TokenTactics Azure JSON Web Token "JWT" Manipulation Toolset Azure access tokens allow you to authenticate to certain endpoints as a user who signs in with a device code. Even if they used multi-factor authentication. Once you have a user's access token, it may be possible to access certain apps...
Jboss_JMXInvokerServlet_Deserialization_RCE
JbossJMXInvokerServletDeserializationRCE Using Burp Suite to Exploit Java Deserialization Vulnerabilities 0x01 Setting Up the Jboss JMXInvokerServlet Deserialization Vulnerability Test Environment: Jboss JMXInvokerServlet Deserialization Vulnerability Vulnerability Principle: JBoss reads the...
ruzzy
Ruzzy A coverage-guided fuzzer for pure Ruby code and Ruby C extensions. Ruzzy is heavily inspired by Google's Atheris, a Python fuzzer. Ruzzy uses libFuzzer or LibAFL for its coverage instrumentation and fuzzing engine. Ruzzy also supports AddressSanitizer and UndefinedBehaviorSanitizer when...
dredge-cargo
This is NOT a password manager. NOT a notes app. And definetely NOT a deep-sea benthic abberant specimen taxonomic provenance registry. But it does the first two better than either. Just kidding not really. Install • Quick Start • Features • The Link Command • Commands • How It Works • Security •...
Shortcut-Payload-Generator
Shortcut-Payload-Generator Exploiting Powershell to make ShortCut Payloads fud. There is too much of awsome tricks there , u can make it better ^^. For Ex : Killing tcpview , taskmanager ..etc while downloading. Set hidden attribs to the malware after downloading....etc G00d by3. ./9aylas EOF...
CVE-2024-6387
CVE-2024-6387.py - PoC Important Notes!!! The exploit works ONLY for 32-bit OpenSSH-Servers. This is due to the POC uses 32-bit pointers! It is also known that some versions are already patched, and not every server is vulnerable. Tested on: Kali Linux, ParrotSec, Ubuntu 22.04 📜 Description Remot...
secretlint
Secretlint Secretlint is a Pluggable linting tool to prevent committing credentials. Features Scanner : Find credentials in a project and report these Project Friendly: Easy to set up your project and integrate CI services Pre-Commit Hook : Prevent committing credential files Pluggable : Allow...
Decepticon
Decepticon — Autonomous Red Team Agent "Another AI hacker? Let us guess — it runs nmap and writes a report." ☁️ Don't want to self-host? Decepticon is live in the cloud. Skip the Docker setup — run autonomous red-team engagements right from your browser. Install Prerequisites : Docker and Docker...
Centreon-RCE
Centreon-RCE Centreon v.19.04 Remote Code Execution exploit CVE-2019-13024 Revision of https://github.com/mhaskar/CVE-2019-13024 HOW TO USE: 1. Edit argument defaults for convenience, or don't bottom of script 2. If needed, edit 'editcommand' function to defeat defenses 3. '-v' for...
CVE-2024-4879-ServiceNow
CVE-2024-4879-ServiceNow ServiceNow is a platform for business transformation which helps companies manage digital workflows for enterprise operations. CVE-2024-4879 could allow an unauthenticated user to remotely execute code within the Now Platform. This vulnerability exploits three issues by...
paniclock
PanicLock is a macOS menu bar utility that instantly disables Touch ID and locks the screen with a single click or closing your laptop lid. PanicLock fills a gap macOS leaves open: there is no built-in way to instantly disable Touch ID when it matters. Biometrics are convenient day-to-day, and...
mquire
mquire mquire, a play on the memory and inquire words, is a memory querying tool inspired by osquery. Key advantage: No external debug symbols needed mquire can analyze Linux kernel memory snapshots without requiring external debug symbols. Everything needed for analysis is already embedded in th...
piraterf
🏴☠️ PIrateRF - Software-Defined Radio Transmission Platform PIrateRF transforms your Raspberry Pi Zero W into a portable RF signal generator that spawns its own WiFi hotspot. Control everything from FM broadcasts to digital modes through your browser - hack the airwaves from anywhere! 📡⚡ 🎬 Click...
CVE-2021-3156
CVE-2021-3156 PoC Introduction This is an exploit for the CVE-2021-3156 sudo vulnerability dubbed Baron Samedit by Qualys. Usage build: $ make list targets: $ ./sudo-hax-me-a-sandwich run: $ ./sudo-hax-me-a-sandwich manual mode: $ ./sudo-hax-me-a-sandwich Bruteforce target finding experimental Ma...
BeRoot
BeRoot Project BeRoot Project is a post exploitation tool to check common misconfigurations to find a way to escalate our privilege. It has been added to the pupy project as a post exploitation module so it will be executed in memory without touching the disk. This tool does not realize any...
Wireshark
General Information Wireshark is a network traffic analyzer, or "sniffer", for Linux, macOS, BSD and other Unix and Unix-like operating systems and for Windows. It uses Qt, a graphical user interface library, and libpcap and npcap as packet capture and filtering libraries. The Wireshark...
CVE-2023-33243
Proof of Concept for Login with Password Hash in STARFACE CVE-2023-33243 Details are described in our advisory. In the corresponding blog post the vulnerability CVE-2023-33243 is used as an example to describe how we generally approach the analysis of authentication mechanisms and identify...
rifiuti2
Introduction Rifiuti2 is a for analyzing Windows Recycle Bin INFO2 file. Analysis of Windows Recycle Bin is usually carried out during Windows computer forensics. Rifiuti2 can extract file deletion time, original path and size of deleted files and whether the trashed files have been permanently...
react2shell-scanner
react2shell-scanner A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. For technical details on the vulnerability and detection methodology, see our blog post:...
holehe
Holehe OSINT - Email to Registered Accounts 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! Holehe Online Version Summar...
mass_cve-2021-41773
masscve-2021-41773 MASS CVE-2021-41773 Screenshot Usage ! python3 -m pip install requests pyyhon3 cve-2021-41773.py urlist.txt pool Note ! results will be automatically saved in vuln.txt u can add a common dir on...
aether
Aether version : 0.9 stable release Aether is a Windows memory-forensics and threat hunting tool that scans live process memory for malicious pattern, detect injection techniques, implant signatures, reflectively loaded .NET assemblies. it works with a multi-layer confidence model that dramatical...
dnsdmpstr
dnsdmpstr Unofficial API & Client for DNS Dumpster and HackerTarget.com IP tools. https://dnsdumpster.com/ https://hackertarget.com/ip-tools/ Installation git clone https://github.com/zeropwn/dnsdmpstr cd dnsdmpstr pip3 install -r requirements.txt chmod +x ddump.py Usage As a command-line utility...
GCPBucketBrute
GCPBucketBrute A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated. This script optionally accepts GCP user/service account credentials and a keyword. Then, a list of permutations will be generated from that keywor...
noir
Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface. Documentation • Installation • Usage • Contributing • Changelog Noir is a SAST tool that reads source code and extracts the endpoints an application exposes — paths, methods, parameters, headers, cookies, and the source...
OffensiveRust
OffensiveRust My experiments in weaponizing Rust for implant development and general offensive operations. Table of Contents OffensiveRust Why Rust? Examples in this repo Compiling the examples Compiling the examples in this repo Cross Compiling Optimizing executables for size Pitfalls I found...
retire.js
Retire.js What you require you must also retire There is a vast ecosystem of JavaScript libraries available for both web and Node.js applications. While these libraries significantly accelerate development, they also require ongoing maintenance to ensure security vulnerabilities are addressed...
CVE-2023-31779
CVE-2023-31779 Stored XSS in Wekan Description : Stored XSS vulnerability exists in the "Reaction to comment" feature. An attacker with user privilege on kanban board can execute JavaScript code in the browsers of users who open card with malicious reaction. Impact : An attacker can steal...
CVE2_Jenkins_RCE
Jenkins CLI Websocket Hijacking - PoC A proof of concept cross-site WebSocket hijacking exploit for CVE-2024-23898 — a vulnerability affecting Jenkins versions 2.217-2.441. This exploits targets the Jenkins CLI that can be used to remotely access and issue commands to a Jenkins control server...
ogi-transforms
OGI Transform Registry Community transforms for OGI, an open source OSINT and link analysis tool. How it works Each directory under transforms/ is an independently installable transform. The OGI CLI and Transform Hub UI read index.json auto-generated on each merge to discover what's available...
CVE-2021-26084
CVE-2021-26084 CVE-2021-26084 - Confluence Pre-Auth RCE | OGNL injection Install requirements pip3 install -r requirements.txt Run exploit USE: python3 exploit.py https://target.com CMD Ex: python3 exploit.py https://target.com id Ex: python3 exploit.py https://target.com 'ls -la'...
chaos
chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...
CVE-2023-23397
A Simple PoC in PowerShell for CVE-2023-23397 CVE-2023-23397 is a vulnerability in MS Outlook that allows an attacker to potentially exfil user authentication details. The vulnerability relates to the the ability for an attacker to specify a UNC path in the "ReminderSoundFile" property within an...
Brida
Brida Brida is a Burp Suite Extension that, working as a bridge between Burp Suite and Frida, lets you use and manipulate applications’ own methods while tampering the traffic exchanged between the applications and their back-end services/servers. It supports all platforms supported by Frida...
CVE-2019-0708
New vuln exploit...
ics-phishing-toolkit
ics-phishing-toolkit This toolkit for remediating malicious calendar invites is designed to help teams using email security solutions that don't natively remediate these attacks. If you're using Sublime, you don't need this toolkit because remediation is natively supported. Supported stacks...
combobulator
Dependency Combobulator Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage and potential attacks. This facilitates a holistic approach for ensuring secure application releases that can be evaluated against different sourc...
nibble
Nibble is a CLI tool for local network scanning that focuses on speed and ease of use. Select a network interface, and it scans your local subnet. Lists hosts, hardware manufacturer, open ports and their services. ⚡ Lightning fast, scans using lightweight threads 🔒 Safe, does not need admin acces...