TOTPAuthenticate

TOTP Authenticate Uses session handling rules to add a TOTP token to outgoing requests. For Burp Suite Enterprise Edition Please note that extensions are written by third party users of Burp, and PortSwigger makes no warranty about their quality or usefulness for any particular purpose. Usage 1...

CVE-2023-34362

CVE-2023-34362 POC for CVE-2023-34362 affecting MOVEit Transfer Technical Analysis A technical root cause analysis of the vulnerability can be found on the blog: Summary This POC abuses an SQL injection to obtain a sysadmin API access token and then uses that access to abuse a deserialization cal...

EATGuard

EATGuard Implementation of an export address table protection mitigation, like Export Address Filtering EAF How It Works This project is composed of three binaries that, when compiled, can be found in EATGuard\bin. They are: 1. EATGuardApplication.exe - "Malicious" application that loads...

0l4bs

0l4bs Cross-site scripting labs for web application security enthusiasts List of Chall : Chall 1 | URL Chall 2 | Form Chall 3 | User-Agent Chall 4 | Referrer Chall 5 | Cookie Chall 6 | LocalStorage Chall 7 | Login Page Chall 8 | File Upload Chall 9 | Base64 Encoding Chall 10 | Removes Alert Chall...

probo

Probo Open-source GRC platform for engineers. Probo is a self-hostable governance, risk, and compliance GRC platform built for engineering and security teams. It covers the full GRC lifecycle: risk identification, control tracking, vendor risk, data privacy, access reviews, audit programs, and...

raptor

╔═══════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ██████╗ ████████╗ ██████╗ ██████╗ ║ ║ ██╔══██╗██╔══██╗██╔══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ║ ║ ██████╔╝███████║██████╔╝ ██║ ██║ ██║██████╔╝ ║ ║ ██╔══██╗██╔══██║██╔═══╝ ██║ ██║ ██║██╔══██╗ ║ ║ ██║ ██║█...

CVE-2026-63030

CVE-2026-63030: wp2shell WordPress Batch API Desynchronization SQL Injection Exploit Proof of Concept tool for extracting users and password hashes via the CVE-2026-63030 wp2shell vulnerability. Vulnerability Information CVE : CVE-2026-63030 wp2shell Companion CVE : CVE-2026-60137 Type : Pre-Auth...

CVE-2020-11883

CVE-2020-11883 vue-storefront-api vulnerability 🛠 Setup $ yarn instal $ tsnd . 🧨 Examples Message format $ tsnd . In this example, I tested the "Lights.ie" page. 🙀 Disclaimer This application is for testing purposes only, I am not responsible for any problems that may arise. Please test only wher...

mqattack

mqattack A Rust-based MQTT penetration testing tool for the command line. Features Subscribe - listen to one or more topic filters Publish - send a payload to a topic Fingerprinting - allows to identify the MQTT broker Check ACL - probe subscribe/publish permissions for one topic or a wordlist...

Python-MikrotikLoginExploit

Mikrotik Login Exploit PoC Proof of Concept of the Mikrotik vulnerability CVE-2018-14847 especially on Winbox, which works by reading passwords directly from RouterOS on the default port 8291. Original by: https://github.com/BigNerd95/ Requirements Python 3+ Installation on Linux apt install...

usn_analytics

USN Analytics Build git clone https://github.com/4n6ist/usnanalytics.git Linux sudo dnf groupinstall development-tools // Fedora sudo dnf install glibc-static libstdc++-static // Fedora sudo apt-get install build-essential // Debian/Ubuntu cd usnanalytics make Windows Install MinGW-W64...

sshhipot

Version 2 is under development. Please switch to the v2 branch, build, and run with -h. SSHHiPot High-interaction SSH honeypot ok, it's really a logging ssh proxy. Still more or less a work-in-progress. Feel free to go install this repository if you'd like to try it. Run it with -h to see more...

DeimosC2

DeimosC2 Deimos is in: DEPRECATED DeimosC2 is no longer maintained and has a known XSS vulnerability CVE-2025-26244. Thanks to JaRm222 for identifying the vuln and notifying us. His writeup of the vuln can be foundhere. DeimosC2 is a post-exploitation Command & Control C2 tool that leverages...

pentest-book

description: - This book contains a bunch of info, scripts and knowledge used during my pentests. /home/six2dez/.pentest-book Thanks to visit this site, please consider enhance this book with some awesome tools or techniques you know, you can contact me by Telegram@six2dez, Twitter@six2dez1 or...

netbox

The cornerstone of every automated network NetBox Community | NetBox Cloud | NetBox Enterprise NetBox exists to empower network engineers. Since its release in 2016, it has become the go-to solution for modeling and documenting network infrastructure for thousands of organizations worldwide. As a...

CVE-2025-51859

CVE-2025-51859 Vulnerability description Chaindesk, a web application for constructing AI Agents, is vulnerable to Stored Cross-Site Scripting XSS in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the...

POC-CVE-2025-68613

POC-CVE-2025-68613 My poc to exploit this vuln :D...

CVE-2026-38945

CVE-2026-38945 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200967 rvia in Raynet executes a find command with improperly terminated search criteria to locate Java installations when...

JitBit_Helpdesk_Auth_Bypass

This repository does not have a README...

text4shell-cve-2022-42889

Text4Shell CVE-2022-42889 Docker Lab for CVE-2022-42889 You can either build the Docker image locally or pull the image from Docker Hub and run the container. Clone the repo git clone https://github.com/devenes/text4shell-cve-2022-42889.git Build the Docker image locally docker build...

log4j-vulnerable-app-cve-2021-44228-terraform

log4j-vulnerable-app-cve-2021-44228-terraform A Terraform to deploy vulnerable app and a JNDIExploit to work with CVE-2021-44228 About Stack This terraform creates two instances on a VPC in AWS Cloud. You just need to export your AWSACCESSKEYID and AWSSECRETACCESSKEY One instance is JNDIExploit...

CVE-2021-44228-POC

CVE-2021-44228-POC exploit CVE-2021-44228 download nuclei sudo cp nuclei /usr/bin/nuclei sudo chmod +x /usr/bin/nuclei git clone https://github.com/sec13b/CVE-2021-44228-POC.git mv CVE-2021-44228-POC log4shellexploit mkdir yaml mv .yaml yaml/ run: python3 log4shellexploit.py http://iptoexploit...

sshtunnel

|Tests| |AppVeyor| |readthedocs| |coveralls| |version| |pyversions| |license| Author : Pahaz Repo : https://github.com/pahaz/sshtunnel/ Inspired by https://github.com/jmagnusson/bgtunnel, which doesn't work on Windows. See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py...

KQL-threat-hunting-queries

Threat hunting/detecting using KQL queries | |/ / | | | | | | | | | / | | | | | | | | | \ | | | | \ | |/ | | ' | | | | | | | | || | | | | / \ | | | || | | | | | | | | | || | | | | . | || | | | | | | !NOTE Jan. 27th: After almost a year of contributions, this repository is undergoing a heavy...

kali-cloud

Kali-Cloud Build-Script Kali Linux cloud image builder viaFAI Fully Automatic Installation, forked from Debian Cloud Images. These are the same build-scripts that the Kali team uses to generate the official Kali Linux cloud images, found on kali.org/get-kali/. For more information, please see:...

CVE-2024-21413

This repository does not have a README...

OsintCase

OSINTCase Based onOSINTMapper by Geistnigma. This project is a modified and extended version of OSINTMapper with additional features and changes focused on investigation case management, intelligence analysis and evidence handling. A browser-based OSINT investigation and case mapping tool. Organi...

flask_pythonanywhere_redirector

flaskpythonanywhereredirector flask pythonanywhere C2 redirector template Setup 1. Goto: https://www.pythonanywhere.com/ 2. Web Tab - Add new web app - Flask - Python2.7 - next.. 3. scroll down to code - Go to directory - Flaskapp.py 4. Copy and paste code from app.py to file - save top right 5...

CVE-2023-46818

CVE-2023-46818 An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. Usage ❯ python3 CVE-2023-46818.py Usage: python3 CVE-2023-46818.py Poc of CVE-2023-46818 ISPConfig = 3.2.11 - Code...

hook

Hook Hook exploits a parameter injection vulnerability in the WatchGuard SSH interface. The vulnerability allows a low privileged user to exfiltrate arbitrary system files to an attacker controlled FTP server. Fortunately, there is a builtin low privileged user named status that this script...

msfconsole-termux

msfconsole-termux How To Install Metasploit-Table on the Android Termux pkg update apt-get install curl wget -y wget https://raw.githubusercontent.com/jas502n/msfconsole-termux/master/metasploit.sh |chmod 777 metasploit.sh && ./metasploit.sh EXP msfconsole -q -x "use...

MailAccess

Let's connect mailaccess.pro · Docs · PyPI · Changelog Open-source email OSINT and email scraper. One email in, every account behind it: 82 modules check 5,300+ platforms, and every finding says how it was found and how sure we are. One domain in, every public email at the company. Run it on your...

vulnerable-nextjs-14-CVE-2025-29927

CVE-2025-29927 Authorization Bypass reproduction This repository is a reproduction of the CVE-2025-29927 vulnerability in the next package How to reproduce 1. Follow the steps below to clone, and run the Next.js application 2. Test authorization denies access to the /api/hello endpoint $ curl...

WHS4_CVE-2021-4034

CVE-2021-4034 PwnKit - Local Privilege Escalation PoC 🔗 Original Project : berdav/CVE-2021-4034 This project is an educational analysis and modification based on the original. MIT License Compliant | White Hat School Training Task 📋 Overview CVE-2021-4034 is a local privilege escalation...

CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-41646---Critical-Authentication-Bypass- CVE-2025-41646 - Critical Authentication bypass 🔓 CVE-2025-41646 - RevPi WebStatus Authentication Bypass PoC A critical authentication bypass vulnerability CVE-2025-41646 in RevPi WebStatus ≤ v2.4.5 allows an attacker to log in as admin without val...

Exploits

Windows Exploits A curated archive of complied and tested public Windows exploits...

CVE-2023-28324

CVE-2023-28324 POC for CVE-2023-28324 affecting Ivanti EPM. Technical Analysis A technical root cause analysis of the vulnerability can be found on our blog: https://www.horizon3.ai/attack-research/attack-blogs/cve-2023-28324-deep-dive/ Summary This POC abuses a vulnerability in AgentPortal.exe t...

CVE-2016-0846-PoC

CVE-2016-0846-PoC...

metashield-clean-up-sdk-python

============================== Metashield-clean-up-sdk-python Installation Install the metashieldcleanup package using pip:: pip install metashieldcleanup Usage Example for cleaning a file. .. code-block:: python import time import base64 from metashieldcleanup.api import MetashieldCleanUp api =...

gssapi-abuse

gssapi-abuse gssapi-abuse was released as part of my DEF CON 31 talk. A full write up on the abuse vector can be found here: A Broken Marriage: Abusing Mixed Vendor Kerberos Stacks The tool has two features. The first is the ability to enumerate non Windows hosts that are joined to Active Directo...

spark-history-store-path

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · spark-history-store-path Write-up: https://abraxaslabs.tech/research/spark-history-store-path spark-history-store-path Class: File write config-gated Reach: Remote Apache Spark 4.2.0 32f72996 - Apache Software...

flare-fakenet-ng

| /\ | |/ / | \ | | | | | \ | |/ | | | / \ | ' /| | | | | | | || | | | | / /\ \ | | | | . | | | || . | | | | | | / | . | || |\ | | | | | |\ | || | ||// \|\|| || || || || D O C U M E N T A T I O N FakeNet-NG 3.5 is a next generation dynamic network analysis tool for malware analysts and...

CVE-2026-43499-OnePlus15

CVE-2026-43499 — OnePlus 15 LPE Educational PoC WARNING: This repository is provided for educational and research purposes only. No pre-built binaries or releases are distributed. You must build everything from source. Android 16 local privilege escalation for OnePlus 15. Fork of...

CVE-2022-36804

CVE-2022-36804 Bitbucket RCE 2022 This repo is part of the hgrab-framework dork title: "Public Repositories - Bitbucket" Affected product - Bitbucket Server and Data Center 7.6 prior to 7.6.17 - Bitbucket Server and Data Center 7.17 prior to 7.17.10 - Bitbucket Server and Data Center 7.21 prior t...

CVE-2023-22515

Confluence Vulnerability - CVE-2023-22515 📓 Introduction Atlassian was informed about a possible vulnerability that could be exploited and compromising the environment through administrative access. On October 4, 2023, Atlassian released a security advisory regarding CVE-2023-22515 which got a CV...

2022-LPE-UAF

2022-LPE-UAF Untested POC code Security researchers discovered 3 vulnerabilities in the Linux kernel that could allow a local attacker to elevate privileges and potentially execute malicious code. The proof-of-concept code is publicly available increasing the likelihood of exploitation in the wil...

dump

Dump This repository contains dead/unfinished projects, small scripts or stuff that doesn't deserve a repository of its own. Contents git-gat : post-exploitation script for finding private git repos Infinity dead : find phone number of any Facebook user. json2paths : converts JSON keys to paths f...

wikipedia-c2

Wikipedia-C2 Wikipedia C2 Blog Post This is a demo project to demonstrate Command and Control utilizing Wikipedia. After Josh Abraham's demo of C2 utilizing Slack and ICMP, I thought I'd explore what other options in the internet's top sites could be used for C2. After reviewing Wikipedia's API, ...

openam-CVE-2021-35464

openam CVE-2021-35464 tomcat command execution with echo. Project based on ysoserial and Java-Rce-Echo Building the project requires adding ysoserial.jar and jato-14.6.3.jar to dependencies. POST /OpenAM/ccversion/Version HTTP/1.1 Host: php.local:8081 Upgrade-Insecure-Requests: 1 User-Agent:...

Detours

Microsoft Research Detours Package Detours is a software package for monitoring and instrumenting API calls on Windows. Detours has been used by many ISVs and is also used by product teams at Microsoft. Detours is now available under a standard open source license MIT. This simplifies licensing f...