ExploitMann

ExploitMann's Stars

• epi052/feroxbuster

  A fast, simple, recursive content discovery tool written in Rust.

  Language:Rust6k502

• KTN1990/CVE-2022-0316_wordpress_multiple_themes_exploit

  ( Wordpress Exploit ) Wordpress Multiple themes - Unauthenticated Arbitrary File Upload

  Language:Python115

• im-hanzou/fubucker

  Automatic Mass Tool for checking vulnerability in CVE-2022-1386 - Fusion Builder < 3.6.2 - Unauthenticated SSRF

  Language:Shell52

• sealldeveloper/CVE-2022-21661-PoC

  A Python PoC of CVE-2022-21661, inspired from z92g's Go PoC

  Language:Python63

• projectdiscovery/nuclei

  Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

  Language:Go20.9k2.5k

• M3l0nPan/wordpress-cve-2021-29447

  Exploit WordPress Media Library XML External Entity Injection (XXE) to exfiltrate files.

  Language:Python4

• Loop-Man/BehindTheCDN

  Bypass CDN/WAF

  Language:Shell135

• nomi-sec/PoC-in-GitHub

  📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

  6.6k1.2k

• ViRb3/wgcf

  🚤 Cross-platform, unofficial CLI for Cloudflare Warp

  Language:Go6.3k699

• tarraschk/CVE-2023-36884-Checker

  Script to check for CVE-2023-36884 hardening

  Language:PowerShell143

• Coday-meric/POS-ingenico_API

  API for use Ingenico POS

  Language:Python5

• Ousret/pyTeliumManager

  Python library to manipulate Ingenico mobile payment device like iCT220 or iWL220 equipped with Telium Manager. RS232/USB.

  Language:Python10520

• F4pl0/ingenico-pos-dotnet-lib

  .netstandard2.0 Class library for communication with Asseco Group Ingenico POS Device written in C#

  Language:C#267

• minsooerickim/BufferOverflowAttack

  🔐 explores techniques to exploit and manipulate buffer overflow vulnerabilities in a program.

  Language:C241

• dhmosfunk/CVE-2023-25690-POC

  CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.

  Language:Dockerfile27036

• GhostTroops/scan4all

  Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)...

  Language:Go5.6k666

• cybfar/cve-2021-42013-httpd

  CVE: 2021-42013 Tested on: 2.4.49 and 2.4.50 Description: Path Traversal or Remote Code Execution vulnerabilities in Apache 2.4.49 and 2.4.50

  Language:Dockerfile11

• blackarrowsec/redteam-research

  Collection of PoC and offensive techniques used by the BlackArrow Red Team

  Language:C1.1k188

• google/security-research

  This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code.

  Language:C3.4k413

• ihebski/DefaultCreds-cheat-sheet

  One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️

  Language:Python5.8k705

• blackhatethicalhacking/SecretOpt1c

  SecretOpt1c is a Red Team tool that helps uncover sensitive information in websites using ACTIVE and PASSIVE Techniques for Superior Accuracy!

  Language:Shell21830

• lanleft/CVE-2023-1829

  Language:C7315

• 0xKayala/NucleiFuzzer

  NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications

  Language:Shell1.3k200

• OpenCTI-Platform/opencti

  Open Cyber Threat Intelligence Platform

  Language:TypeScript6.5k959

• SAPT01/HBSQLI

  Automated Tool for Testing Header Based Blind SQL Injection

  Language:Python26461

• christophetd/CloudFlair

  🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.

  Language:Python2.6k361

• xqx12/daily-info

  31348

• Moham3dRiahi/XAttackProV30

  XAttacker Tool PRO V30 Website Vulnerability Scanner & Auto Exploiter

  469171

• pikpikcu/nodesub

  Nodesub is a command-line tool for finding subdomains in bug bounty programs

  Language:JavaScript13624

• qeeqbox/honeypots

  30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

  Language:Python701113