Tools

r4wd3r/suborner

Creates invisible Windows accounts with administrative privileges via direct SAM manipulation and RID hijacking, bypassing standard user management…

m3ssap0/wordpress-really-simple-security-authn-bypass-exploit

Python exploit for CVE-2024-10924 authentication bypass in Really Simple Security < 9.1.2. Enables unauthenticated login as any existing WordPress…

gill-singh-a/vsftp-2.3.4-remote-root-shell-exploit

A Simple Python Program that uses gets a Remote Root Shell on the Target Device by exploiting a Vulnerability (CVE-2011-2523) present in vsFTP 2.3.4

batchmcnulty/malbait

Simple TCP/UDP honeypot implemented in Perl

mrp4nda1337/cve-2023-23752

simple program for joomla scanner CVE-2023-23752 with target list

4g3nt47/striker

Multi-operator C2 framework with native C and Python agents, HTTP(S) channels, asynchronous tasking, and a reactive web UI for red team operations.

z3n70/cve-2023-23752

simple program for joomla CVE-2023-23752 scanner for pentesting and educational purpose

gmh5225/deobf-arxan-deob-c

Simple C program to quickly deobfuscate windows executables protected with Arxan.

z3n70/cve-2020-5902

BIGIP CVE-2020-5902 Exploit POC and automation scanning vulnerability

suenerve/cve-2022-30190-follina-patch

The CVE-2022-30190-follina Workarounds Patch

evdenis/lsm_bpf_check_argc0

LSM BPF module to block pwnkit (CVE-2021-4034) like exploits

chandanshastri/log4j_vulnerability_demo

A simple program to demonstrate how Log4j vulnerability can be exploited ( CVE-2021-44228 )

z3n70/cve-2021-43798

Simple program for exploit grafana

z3n70/cve-2021-41277

simple program for exploit metabase

alejandro-llanes/http_bridge

SOCKS5-to-HTTP proxy bridge that tunnels arbitrary TCP streams (SSH, SMTP, TLS) through standard HTTP requests, enabling network traffic obfuscation…

mildsunrise/protobuf-inspector

🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition

keepwannabe/remot3d

Remot3d: is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server by backdoors