pickle21345 Goto Github PK

at-tftp_long_filename

Exploits a stack buffer overflow in AT-TFTP v1.9, by sending a request (get/write) for an overly long file name.

autopy

autorecon

AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.

ciscot7

Cisco Type 7 Password Decrypter

crowbar

Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supported by thc-hydra and other popular brute forcing tools.

crypto_xor

Various XOR decoder techniques to solve Capture the Flag (CTF) Problems

csci4349_week7_wppentest

ctf-tools

tổng hợp tool ctf

cve-2006-6184

This is a python-based standalone exploit for CVE-2006-6184. This exploit triggers a stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a denial of service or execute arbitrary code.

cve-2015-8562

Joomla 1.5 - 3.4.5 Object Injection RCE X-Forwarded-For header

cve-2017-12617

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

cve-2018-7600

Exploit for Drupal 7 <= 7.57 CVE-2018-7600

cve-2018-9276

CVE-2018-9276 PRTG < 18.2.39 Authenticated Command Injection (Reverse Shell)

exploits

Some of my exploits.

honeypot

CodePath University Web Security Week 9 Assignment

honeypot_findings

HoneyPot assignment for CodePath

hp-power-manager

HP Power Manager 'formExportDataLogs' Buffer Overflow

ist4310

john

John the Ripper jumbo - advanced offline password cracker, which supports hundreds of hash and cipher types, and runs on many operating systems, CPUs, GPUs, and even some FPGAs

lfi-phpinfo-rce

remote code execution with the help of phpinfo and lfi

linuxprivchecker

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

local-exploits

Various local exploits

metasploit-framework

Metasploit Framework

ms17-010

MS17-010

nishang

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

oscp

Materials for OSCP exam

oscp-note

list of useful commands, shells and notes related to OSCP

packetstorm-exploits

Collection of publicly available exploits from Packetstorm

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-notes