cmsPoc

Attention The project is being refactored: cmsPoc 2.0 Note: The POC library for version 2.0 has not yet been updated with the corresponding interfaces, so it cannot be used. If you need to use it, it is recommended to use version 1.0 first. cmsPoc 1.0 Requirements python2.7 Works on Linux, Window...

msldap

🚩 赞助商 如果您喜欢这个项目，请考虑购买 OctoPwn 的许可证，这是我们的一款完整渗透测试套件，可在浏览器中运行！ 如需获取新版本/发布通知及其他信息，请加入我们的 Discord msldap 用于 MS AD 的 LDAP 库 🚩 可在浏览器中运行 该项目以及许多其他渗透测试工具借助 OctoPwn 的能力在浏览器中运行！ 请查看社区版本：OctoPwn - Live 文档 这里有很棒的文档！ 特性 内置控制台 LDAP 客户端 所有参数均可通过便捷的 URL 控制（见下文） 支持集成 Windows 身份验证（SSPI），包括 NTLM 和 Kerberos 支持通道绑定（适...

msldap

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord msldap LDAP library for MS AD 🚩 Runs in the browser This project, alongside with many...

pagodo

pagodo - Dorking Pasivo de Google Introducción pagodo automatiza la búsqueda en Google de páginas web y aplicaciones potencialmente vulnerables en Internet. Reemplaza la realización manual de búsquedas de dorks de Google con un navegador web con interfaz gráfica. Hay 2 partes. La primera es...

pagodo

pagodo - Passive Google Dork Introduction pagodo automates Google searching for potentially vulnerable web pages and applications on the Internet. It replaces manually performing Google dork searches with a web GUI browser. There are 2 parts. The first is ghdbscraper.py that retrieves the latest...

linux-malware

linux-malware 此仓库最近7天的更新视图 提交内容? 新闻/学术界 https://en.wikipedia.org/wiki/Linuxmalware 17 - Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control, Exfiltration, Impact, DarkSide https://rp.os3.nl/...

ffuf

ffuf - Fuzz Faster U Fool Un fuzzer web rápido escrito en Go. Instalación Ejemplo de uso Descubrimiento de contenido Descubrimiento de vhost Fuzzing de parámetros Fuzzing de datos POST Uso de mutador externo Archivos de configuración Ayuda Modo interactivo Instalación Descarga un binario...

ffuf

ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...

CVE-2021-22214

CVE-2021-22214 GitLab CI Lint API Unauthorized SSRF Vulnerability CVE-2021-22214 This article and the tool are for technical sharing only. Strictly prohibited for illegal use, otherwise all consequences shall be borne by the user. Usage help $ python3 gitlabssrf.py...

tiffdisabler

This repository does not have a README...

AzureADEnumeration

Enumeración no autenticada de Microsoft Entra ID Azure AD Fuente: EvilMist Toolkit - Invoke-EntraEnum.ps1 - https://github.com/Logisek/EvilMist 1. Descubrimiento de tenant -TenantInfo Descubre información del tenant mediante API públicas. 1.1 API azmap.dev Recupera los detalles del tenant del...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

KsDumper

🔴 This repo is outdated due to the Capcom driver being patched 🔴 Thanks to mastercodeon314 there's now a port working on Windows 11. Enjoy ! https://github.com/mastercodeon314/KsDumper-11 KsDumper I always had an interest in reverse engineering. A few days ago I wanted to look at some game...

gospider

GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO install GO111MODULE=on go install github.com/jaeles-project/gospider@latest Docker...

gospider

GoSpider GoSpider - Rápido rastreador web escrito en Go ¿Integrar Gospider sin complicaciones en tu flujo de trabajo de reconocimiento? este proyecto fue parte de Osmedeus Engine. Mira cómo fue integrado en @OsmedeusEngine Instalación Instalación con GO GO111MODULE=on go install...

Red-Teaming-Toolkit

Red Teaming Toolkit This repository contains cutting-edge open-source security tools OST that will help you during adversary simulation and as information intended for threat hunter can make detection and prevention control easier. The list of tools below that could be potentially misused by thre...

Magisk

这不是谷歌官方支持的产品 简介 Magisk 是一套用于定制 Android 的开源软件，支持 Android 6.0 及更高版本的设备。 一些突出特性： MagiskSU ：为应用程序提供 Root 访问权限 Magisk 模块 ：通过安装模块修改只读分区 MagiskBoot ：最完整的 Android 启动镜像解包和打包工具 Zygisk ：在每个 Android 应用程序进程中运行代码 下载 Github 是获取官方 Magisk 信息和下载的唯一来源。 实用链接 安装指南 构建与开发 Magisk 文档 Zygisk 模块示例 错误报告 仅接受来自 Debug 版本的错误报告。...

CVE-2024-3400

CVE-2024-3400 Description A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code...

Keycloak-12.0.1-CVE-2020-10770

Keycloak-12.0.1-CVE-2020-10770 Keycloak 12.0.1 - 'requesturi' Server-Side Request Forgery SSRF ciego Sin autenticación Exploit-DB-50405 Resultado esperado: Escaneo de puertos de localhost o hosts accesibles internamente. Destinado únicamente para fines educativos y pruebas en entornos corporativo...

CVE-2024-57727

CVE-2024-57727 CVE-2024-57727 python poc.py http://target python poc.py https://192.168.32.130 + https://192.168.32.130 is vulnerable blog: https://rustlang.rs/posts/simple-help/...

apm

APM A better local password manager for everyone. APM is a fast, zero-knowledge CLI password manager written in Go and Rust. It stores 25+ structured secret types in a single encrypted vault — from passwords and TOTP codes to SSH keys, medical records, photos, and binary files. Two binaries ship...

CVE-2024-4577-PHP-RCE

PHP RCE PoC CVE-2024-4577: Inyección de Argumentos en PHP-CGI Resumen Este repositorio contiene scripts para verificar la vulnerabilidad CVE-2024-4577, un problema de inyección de argumentos en PHP-CGI. Puede usar los scripts Bash, Go y Python proporcionados para probar una lista de dominios para...

css-the-bomb-inside-your-inbox

CSS: la bomba dentro de tu bandeja de entrada Bienvenido al repositorio. Este repositorio contiene todos los materiales de mi charla "CSS: la bomba dentro de tu bandeja de entrada". Este repositorio contiene código de prueba de concepto, casos de prueba y material de apoyo que fueron identificado...

WeBaCoo

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ | | | | | \ / \ | | | | | | / / | / / | |/| |/ \ / | | / \ / \ \ /\ / / | / / | | /\ | | / / / ,| // / Web Backdoor Cookie Script-Kit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Written by: Anestis Bechtsoudis @ bechtsoudis.com Copyright C 2011-2012...

-CVE-2018-0834-aab-aar

Shoutout to @reubensammut, u a beast G. CVE-2018-0834 full code execute. include static offsets, bypasses cfg,dep,aslr : enjoy...

CVE-2016-6663

Este repositorio no tiene un README...

CVE-2024-4885

CVE-2024-4885 PoC for CVE-2024-4885 Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution CVE-2024-4885 Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/ Usage python3...

porterminal

Hand a computer to an agent, full control, and watch it. One command, one URL. Also a slick terminal for your own phone. 1. uvx ptn 2. Hand the URL to an AI agent, or scan the QR yourself 3. Watch it work in any browser, and take over anytime !WARNING That complete URL is full access to this...

JKS-private-key-cracker-hashcat

JKS private key cracker - Nail in the JKS coffin The Java Key Store JKS is the Java way of storing one or several cryptographic private and public keys for asymmetric cryptography in a file. While there are various key store formats, Java and Android still default to the JKS file format. JKS is o...

SwaggerSpy

SwaggerSpy Overview SwaggerSpy is a tool designed for automated Open Source Intelligence OSINT on SwaggerHub. This project aims to streamline the process of gathering intelligence from APIs documented on SwaggerHub, providing valuable insights for security researchers, developers, and IT...

TeamFiltration

TeamFiltration TeamFiltration 是一个跨平台框架，用于枚举、喷射、窃取和植入后门的 O365 EntraID 账户。 请参阅 TeamFiltration 维基页面了解 TeamFiltration 的工作原理，以及快速入门指南学习如何快速上手！ 该工具自 2021 年 1 月起在 TrustedSec 内部使用，并在 DefCON30 期间我的演讲 Taking a Dump In The Cloud 中公开发布。 下载 您可以下载适用于 Linux、Windows 和 MacOS 的最新预编译版本...

ghost-route

👻 Ghost Route A Python script to check Next.js sites for corrupt middleware vulnerability CVE-2025-29927. The corrupt middleware vulnerability allows an attacker to bypass authentication and access protected routes by send a custom header x-middleware-subrequest. Next JS versions affected: 11.1.4...

CVE-2021-25003

CVE-2021-25003 Title: WPCargo 6.9.0 - Unauthenticated RCE Author: Krzysztof Zając https://kazet.cc/ CVE: CVE-2021-25003 Installation git clone https://github.com/biulove0x/CVE-2021-25003.git cd CVE-2021-25003/ python3 -m pip install -r requirements.txt How to run autoexploit $ python3 WpCargo.py...

PyLadon

Escáner Ladon para Python PyLadon Actualmente, la versión de Python tiene pocas funcionalidades, tanto en rendimiento como en velocidad es inferior a Ladon.exe en sistemas Windows o Linux. La única ventaja es la multiplataforma, se agregarán funciones relacionadas en el futuro. La desventaja...

raptor_infiltrate20

raptorinfiltrate20 "Bugs are by far the largest and most successful class of entity." -- Encyclopedia of Animal Life This repository contains all materials related to my talk "The INFILTRATE effect: 6 bugs in 6 months" presented at INFILTRATE20 on January 26, 2021. Related links...

sudo-snooper

sudo-snooper sudo-snooper actúa como el binario sudo original para engañar a los usuarios y hacer que introduzcan sus contraseñas. Mostrará un prompt falso similar al original para que el usuario introduzca su contraseña sudo. Esto puede ser útil en pruebas de penetración o evaluaciones de...

sudo-snooper

sudo-snooper sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge...

SentinelNav

SentinelNav SentinelNav is a zero-dependency, pure Python binary visualization and forensics tool. It transforms binary data into an interactive spectral map, allowing analysts to visually identify file structures, entropy anomalies, code sections, and potential cryptographic blobs. It combines a...

ParsingPeas

ParsingPeas 🥒 Recopilación automatizada de PEASS + un informe HTML limpio y portátil para trabajo de escalada de privilegios en CTF y laboratorios. Ejecuta un solo comando en el objetivo. ParsingPeas obtiene LinPEAS/WinPEAS desde tu host Kali, ejecuta el escaneo, envía la salida de vuelta y la...

pe_to_shellcode

petoshellcode Converts PE so that it can be then injected just like a normal shellcode. At the same time, the output file remains to be a valid PE. Supports both 32 and 64 bit PEs Authors:@hasherezade & @hh86 Objective The goal of this project is to provide a possibility to generate PE files that...

dirtcow

dirtcow Dirty Cow Linux Local Privilege Escalation Vulnerability Reproduction CVE-2016-5195 0、 Use the command uname -a to check the Linux kernel information 1、 Download the EXP to local/server 2、 Use the command gcc -pthread dirty.c -o dirty -lcrypt to compile dirty.c, generating an executable...

looney-tunables-CVE-2023-4911

PoC of CVE-2023-4911 Looney Tunables This is a PoC of CVE-2023-4911 a.k.a. "Looney Tunables" exploiting a bug in glibc dynamic loader's GLIBCTUNABLES environment variable parsing function parsetunables. Getting Started Executing program We can check if target is vulnerable env -i...

dorkScanner

DORK SCANNER Un típico escáner de dorks de buscadores que extrae resultados de motores de búsqueda con consultas que proporcionas para encontrar URLs vulnerables. Introducción El dorking es una técnica utilizada por redacciones, organizaciones de investigación, auditores de seguridad y delincuent...

proxy

git-pkgs proxy A caching proxy for package registries. Speeds up package downloads by caching artifacts locally, reducing bandwidth usage and improving reliability. Version Cooldown Most supply chain attacks rely on speed: a malicious version gets published and consumed by automated pipelines...

simvyn

simvyn Herramienta universal de desarrollo móvil — controla simuladores iOS, emuladores Android y dispositivos reales desde un único panel y CLI Tabla de Contenidos Inicio Rápido Instalación Agentes de Codificación con IA Características Demostraciones de Módulos Guía de Colecciones Referencia de...

plecost

Plecost Professional WordPress Security Scanner Async-first, library-friendly, no external API required. Table of Contents What is Plecost? Plecost vs WPScan Quick Start Installation CVE Database CVE Detection Engine Scanning Detection Modules WooCommerce Security WP eCommerce Security Output...

exe_to_dll

EXEtoDLL Converts an EXE, so that it can be loaded like a DLL. Supports both 32 and 64 bit DLLs Inspired by the idea of@guywhataguy. Read more here. Download Stable builds are available in releases. Test builds can be downloaded from the build server click on the build and choose the "Artifacts"...

exe_to_dll

EXEtoDLL Convierte un EXE para que pueda cargarse como una DLL. Compatible con DLLs de 32 y 64 bits Inspirado por la idea de@guywhataguy. Lea más aquí. Descarga Las compilaciones estables están disponibles en releases. Las compilaciones de prueba se pueden descargar desde el servidor de...

cloudfox

🦊 CloudFox 🦊 CloudFox te ayuda a obtener conciencia situacional en entornos de nube desconocidos. Es una herramienta de línea de comandos de código abierto creada para ayudar a testers de penetración y otros profesionales de seguridad ofensiva a encontrar rutas de ataque explotables en...

CVE-2022-29337

CVE-2022-29337 C-DATA FD702XW-X-R430 v2.1.13X001 se descubrió que contiene una vulnerabilidad de inyección de comandos a través del parámetro vacmd en formlanipv6. Esta vulnerabilidad permite a los atacantes ejecutar comandos arbitrarios a través de una solicitud HTTP manipulada...