pentestmano Goto Github PK

apache-ofbiz-authentication-bypass

This repo is a PoC with to exploit CVE-2023-51467 and CVE-2023-49070 preauth RCE vulnerabilities found in Apache OFBiz.

auto_wordlists

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

badsecrets

A library for detecting known secrets across many web frameworks

boilerplate-port-scanner

boilerplate-sha-1-password-cracker

burp-payloads

Burp Payloads

byp4xx

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

bypass-403

A simple script just made for self use for bypassing 403

chisel

A fast TCP/UDP tunnel over HTTP

cmseek

CMS Detection and Exploitation suite - Scan WordPress, Joomla, Drupal and over 180 other CMSs

craftcms_cve-2023-41892

Exploit for CVE-2023-41892

cve-2023-2255

CVE-2023-2255 Libre Office

cve-2023-24329-exploit

Example of CVE-2023-24329

cve-2023-24329-poc

cve-2023-26035

POC script for CVE-2023-26035 (zoneminder 1.36.32)

cve-2023-2640-cve-2023-32629

GameOver(lay) Ubuntu Privilege Escalation

cve-2023-32315

Openfire Console Authentication Bypass Vulnerability with RCE plugin

cve-2023-32315-exploit

A PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass

cve-2023-36664-ghostscript-command-injection

Ghostscript command injection vulnerability PoC (CVE-2023-36664)

cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerability

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

dirtycow.github.io

Dirty COW

dotnetversions

Command line tool that shows the currently installed "classic" .NET versions in your system

empire

Empire is a PowerShell and Python post-exploitation agent.

forbidden-buster

A tool designed to automate various techniques in order to bypass HTTP 401 and 403 response codes and gain access to unauthorized areas in the system. This code is made for security enthusiasts and professionals only. Use it at your own risk.

forbiddenpass

fuxploider

File upload vulnerability scanner and exploitation tool.

hacktricks

Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.

hash-identifier

Software to identify the different types of hashes used to encrypt data and especially passwords

htshells

Self contained htaccess shells and attacks