0xbadca7 Goto Github PK

cve-2020-6287-exploit

PoC for CVE-2020-6287 The PoC in python for add user only, no administrator permission set. Inspired by @zeroSteiner from metasploit. Original Metasploit PR module: https://github.com/rapid7/metasploit-framework/pull/13852/commits/d1e2c75b3eafa7f62a6aba9fbe6220c8da97baa8 This PoC only create user with unauthentication permission and no more administrator permission set. This project is created only for educational purposes and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials of this project. Original finding: CVE-2020-6287: Pablo Artuso CVE-2020-6286: Yvan 'iggy' G. Usage: python sap-CVE-2020-6287-add-user.py <HTTP(s)://IP:Port

cve-2021-26084

CVE-2021-26084 - Confluence Server Webwork OGNL injection (Pre-Auth RCE)

cve-2021-3156

cve-2022-0185

CVE-2022-0185

cve-search

cve-search - a tool to perform local searches for known vulnerabilities

cves

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

cwe_checker

cwe_checker finds vulnerable patterns in binary executables

cysecbooks

Libros de Cyber Security

daisho

SuperSpeed USB 3.0 FPGA platform

daredevil

A tool to perform (higher-order) correlation power analysis attacks (CPA).

darkreader

Dark Reader Chrome and Firefox extension

dash

Dash - Reinventing Cryptocurrency

dbgshell

A PowerShell front-end for the Windows debugger engine.

dc2020f-parallel-af-public

DC28CTF challenge parallel-af. Dataflow machine.

dc416-ctf-scoreboard

A scoreboard application for Capture The Flag events

deadpool

Repository of various public white-box cryptographic implementations and their practical attacks.

deepin-screenshot

Screenshot application for DDE

delta-terminal

Inpired by games such as Hacker Elite and Uplink, the is the beginnings of a game that aspires to be a spiritual successor

desktop

💻 Desktop Syncing Client for Nextcloud

device-flasher

Android Factory Image Flasher for Linux, macOS and Windows

dgraph

Fast, Distributed Graph DB

diff-match-patch

Diff Match Patch is a high-performance library in multiple languages that manipulates plain text.

dirtypipe-android

Dirty Pipe root exploit for Android (Pixel 6)

diveintopython3

[Mirror] Dive Into Python 3 online book

dnschef

DNSChef - DNS proxy for Penetration Testers and Malware Analysts

dnsrecon

DNS Enumeration Script

dockerbunker

a tool that helps configure, deploy and manage dockerized web-applications or static sites behind an nginx reverse proxy container

dpscan

A modules enumerator for Drupal

draftr-js.github.io

A pure-JS IETF draft renderer

dryscrape

A lightweight Python library that uses Webkit to enable easy scraping of dynamic, Javascript-heavy web pages