nareshmail Goto Github PK

cheatsheetseries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

cisco-snmp-rce

Cisco IOS SNMP RCE PoC

cloud-service-enum

cobaltstrike

CobaltStrike's source code

cobaltstrike-aggressor-scripts-collection

Collection of tested Cobaltstrike aggressor scripts.

cobaltstrike-ms17-010

cobaltstrike ms17-010 module and some other

code-snippets

Various code snippets

cookie_crimes

Read local Chrome cookies without root or decrypting

cors-vulnerable-lab

Sample vulnerable code and its exploit code

corstest

A simple CORS misconfiguration scanner

css-keylogging

Chrome extension and Express server that exploits keylogging abilities of CSS.

ctfd

CTFs as you need them

cve-2018-10933

CVE-2018-10933 very simple POC

cve-2018-14667

cve-2018-14667 demo

cve-2018-15685

POC for CVE-2018-15685

cve-2018-7600

Proof-of-Concept for CVE-2018-7600 Drupal SA-CORE-2018-002.

cve-2018-7600-drupal-rce

CVE-2018-7600 Drupal RCE

cve-2019-1215

cve-2019-16278

Directory transversal to remote code execution

cve-2019-19576

This is a filter bypass exploit that results in arbitrary file upload and remote code execution in class.upload.php <= 2.0.3

cve-2021-26855_ssrf

POC of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865, ProxyLogon poc

cve-2021-40444

CVE-2021-40444 PoC

defcon-26-workshop-attacking-and-auditing-docker-containers

DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source

dependencycheck

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

diggy

Extract enpoints from apk files.

dirsearch

Web path scanner

disclose

Driving safety, simplicity, and standardization in vulnerability disclosure.

discover

Custom bash scripts used to automate various penetration testing tasks including recon, scanning, parsing, and creating malicious payloads and listeners with Metasploit.

drupalgeddon2

Exploit for Drupalgeddon 2 - CVE-2018-7600