CVE-2020-14756
WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar
README
project base on https://github.com/Y4er/CVE-2020-2555 and weblogic_cmd
test on 12.2.1.4.0 and jdk 1.8.0_221
WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar
Overview
Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.
CVE-2021-24086 This is a proof of concept for CVE-2021-24086 ("Windows TCP/IP Denial of Service Vulnerability "), a NULL dereference in tcpip.sys patc
220 Dec 14, 2022
an impacket-dependent script exploiting CVE-2019-1040
dcpwn an impacket-dependent script exploiting CVE-2019-1040, with code partly borrowed from those security researchers that I'd like to say thanks to.
71 Nov 30, 2022
Malware for Discord, designed to steal passwords, tokens, and inject discord folders for long-term use.
Vital What is Vital? Vital is malware primarily used to collect and extract information from the Discord desktop client. While it has other features (
59 Dec 01, 2022
Log4jScanner is a Log4j Related CVEs Scanner, Designed to Help Penetration Testers to Perform Black Box Testing on given subdomains.
Log4jScanner Log4jScanner is a Log4j Related CVEs Scanner, Designed to Help Penetration Testers to Perform Black Box Testing on given subdomains. Disc
35 Dec 12, 2022
Herramienta para descargar eventos de Sucuri WAF hacia disco.
Descarga los eventos de Sucuri Script para descargar los eventos del Sucuri Web Application Firewall (WAF) en el disco como archivos CSV. Requerimient
2 Nov 29, 2021
Script Crack Facebook Premium ๐ถโโ
prem Script Crack Facebook Premium ๐ถโโ Install Script $ pkg update && pkg update $ termux-setup-storage $ pkg install git $ pkg install python $ pip
1 Dec 03, 2021
(D)arth (S)ide of the (L)og4j (F)orce, the ultimate log4j vulnerabilities assessor
DSLF DSLF stands for (D)arth (S)ide of the (L)og4j (F)orce. It is the ultimate log4j vulnerabilities assessor. It comes with four individual Python3 m
1 Jan 11, 2022
How to exploit a double free vulnerability in 2021. 'Use-After-Free for Dummies'
This bug doesnโt exist on x86: Exploiting an ARM-only race condition How to exploit a double free and get a shell. "Use-After-Free for dummies" In thi
1.2k Dec 25, 2022
StarUML cracker - StarUML cracker With Python
StarUML_cracker Usage On Linux Clone the repo. git clone https://github.com/mana
9 Jun 20, 2022
๐พ๐๐๐ ๐๐๐๐๐๐ ๐๐๐๐๐๐ - ๐ฝ๐ ๐ฒ๐๐๐ข๐๐๐๐๐ - ๐๐๐๐ ๐๐๐๐ - ๐๐๐๐๐๐ ๐ฟ๐ข๐๐๐๐ ๐ฟ๐๐๐๐๐๐ - ๐ฒ๐๐๐๐๐๐ ๐ฑ๐ข : ๐ฐ๐๐ ๐๐๐๐ - ๐ฒ๐๐๐ข๐ฟ๐๐๐ ๐ฒ๐๐ ๐ฝ๐๐ ๐ผ๐๐๐ ๐๐๐ ๐๐๐๐ ๐ฟ๐๐๐๐๐๐๐๐๐
๐พ๐๐๐ ๐๐๐๐๐๐ ๐๐๐๐๐๐ - ๐ฝ๐ ๐ฒ๐๐๐ข๐๐๐๐๐ - ๐๐๐๐ ๐๐๐๐ - ๐๐๐๐๐๐ ๐ฟ๐ข๐๐๐๐ ๐ฟ๐๐๐๐๐๐ - ๐ฒ๐๐๐๐๐๐ ๐ฑ๐ข : ๐ฐ๐๐ ๐๐๐๐ - ๐ฒ๐๐๐ข๐ฟ๐๐๐ ๐ฒ๐๐ ๐ฝ๐๐ ๐ผ๐๐๐ ๐๐๐ ๐๐๐๐ ๐ฟ๐๐๐๐๐๐๐๐๐
2 Oct 27, 2022
้ฟ้ไบaccesskeyๅฉ็จๅทฅๅ ท
aliyun-accesskey-Tools ๆญคๅทฅๅ ท็จไบๆฅ่ฏขALIYUN_ACCESSKEY็ไธปๆบ๏ผๅนถไธ่ฟ็จๆง่กๅฝไปคใ ๅฏนไบALIYUN_ACCESSKEYๅฉ็จๆนๅผๅฏๅ่ๆ็ซ ๏ผ่ฎฐไธๆฌก้ฟ้ไบไธปๆบๆณ้ฒAccess KeyๅฐGetshell ๅทฅๅ ทๆชๅพ ๅฎ่ฃ ๆจกๅ pip install -r require
826 Jan 01, 2023
Anti-Nuke capabilities, powerful moderation features, auto punishments, captcha-verification and more.
Server-Security-Discord-Bot Anti-Nuke capabilities, powerful moderation features, auto punishments, captcha-verification and more. Installation Instal
20 Apr 07, 2022
Automatically download all 10,000 CryptoPunk NFTs.
CryptoPunk Stealer The sole purpose of this script is to download the entire CryptoPunk NFT collection. How does it work? Basically, the website where
7 Oct 22, 2022
Security audit Python project dependencies against security advisory databases.
Security audit Python project dependencies against security advisory databases.
52 Dec 17, 2022
Scan all java processes on your host to check weather it's affected by log4j2 remote code execution
Log4j2 Vulnerability Local Scanner (CVE-2021-45046) Log4j ๆผๆดๆฌๅฐๆฃๆต่ๆฌ๏ผๆซๆไธปๆบไธๆๆjava่ฟ็จ๏ผๆฃๆตๆฏๅฆๅผๅ ฅไบๆๆผๆด็log4j-core jarๅ ๏ผๆฏๅฆๅฏ่ฝ้ญๅฐ่ฟ็จไปฃ็ ๆง่กๆปๅป๏ผCVE-2021-45046๏ผใไธไผ ๆซๆๆฅๅๅฐๆๅฎ็ๆ
86 Dec 09, 2022
Spring Cloud Gateway < 3.0.7 & < 3.1.1 Code Injection (RCE)
Spring Cloud Gateway 3.0.7 & 3.1.1 Code Injection (RCE) CVE: CVE-2022-22947 CVSS: 10.0 (Vmware - https://tanzu.vmware.com/security/cve-2022-22947)
35 Dec 28, 2022
IDAPatternSearch adds a capability of finding functions according to bit-patterns into the well-known IDA Pro disassembler based on Ghidraโs function patterns format.
IDA Pattern Search by Argus Cyber Security Ltd. The IDA Pattern Search plugin adds a capability of finding functions according to bit-patterns into th
48 Dec 29, 2022
Searches through git repositories for high entropy strings and secrets, digging deep into commit history
truffleHog Searches through git repositories for secrets, digging deep into commit history and branches. This is effective at finding secrets accident
10.1k Jan 09, 2023
SecurAID securely connects aid organizations directly with individuals in dangerous situations to allow them to discreetly and effectively get the assistance they need.
SecurAID securely connects aid organizations directly with individuals in dangerous situations to allow them to discreetly and effec
2 Mar 23, 2022
CVE-2021-26855: PoC (Not a HoneyPoC for once!)
Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker b
24 Nov 14, 2022