dz-y/azure-apim-dev-portal-signup-bypassPython script to bypass Azure APIM signup when UI is disabled, this is different from the CVE-2025-66390 as it does not require you to setup anything…
nitrado/cve-2017-9798Checks a shared hosting environment for CVE-2017-9798
ioactive/jdwp-shellifierExploitation script for exposed Java Debug Wire Protocol (JDWP) services, enabling pentesters to inject Java code and execute arbitrary OS commands…
isabbii/poc-apache-cve-2021-41773-infrastructure-labDocker-based lab for Apache CVE-2021-41773 path traversal and RCE exploitation with Python exploit script, demonstrating vulnerability analysis and…
0xbingo/cve-2025-1974A minimal test tool to help detect annotation injection vulnerabilities in Kubernetes NGINX Ingress controllers. This script sends a crafted…
sleventyeleven/linuxprivcheckerLocal Linux enumeration script that identifies privilege escalation vectors including misconfigurations, world-writable files, clear-text passwords,…
rxerium/cve-2025-61882-cve-2025-61884Detection for CVE-2025-61882 & CVE-2025-61884
gensecaihq/cve-2024-3094-vulnerability-checker-fixerShell script and Ansible playbook to detect and remediate CVE-2024-3094 in xz-utils by checking package versions, upgrading or downgrading to a…
csuribird/cve-2025-2304This Python script exploits a critical mass assignment vulnerability in Camaleon CMS version 2.9.0, allowing any registered user to escalate their…
sleepthegod/dns-zone-auditThis Bash script checks domains for DNS zone transfer misconfigurations (CVE-1999-0532). It queries name servers and attempts AXFR requests; if…
axisops/cve-2021-44228log4j mitigation work
hazemkya/cve-2024-3094-checkerBash script to detect and remediate CVE-2024-3094, a critical supply-chain vulnerability in the XZ Utils library, with automatic safe version…
amnnrth/cve-2025-14847This script is used to identify MongoDB services that are network-exposed and allow unauthenticated protocol handshakes.
guettli/fix-cve-2020-15228Python script that automatically patches GitHub Actions workflow files to replace deprecated and insecure ::set-env and ::add-path commands with the…
jenderal92/git-dumpThis script is a tool to recursively download the contents of the '.git' directory from a website. Using Python and libraries like 'requests' and…
galacticquest/cve-2024-3094-detectBash script to detect vulnerable XZ Utils versions (CVE-2024-3094) and downgrade to a safe release, supporting multiple Linux distributions and…
tda90/cve-2021-36934CVE-2021-36934 PowerShell Fix
derco0n/mitigate-folinaMitigates the "Folina"-ZeroDay (CVE-2022-30190)
