kleiton0x00 / TodessternLinks
A simple mutator engine which focuses on finding unknown classes of injection vulnerabilities
☆67Updated last year
Alternatives and similar repositories for Todesstern
Users that are interested in Todesstern are comparing it to the libraries listed below
Sorting:
- Nuclei template to detect Apache servers vulnerable to CVE-2024-38473☆29Updated last year
- This repository offers insights and a proof-of-concept tool to exploit two significant deserialization vulnerabilities in Inductive Autom…☆45Updated last year
- ☆24Updated 9 months ago
- ☆37Updated 8 months ago
- A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an a…☆56Updated last year
- A complete security assessment tool that supports common web security issues scanning and custom POC | Be sure to read the document befor…☆19Updated 11 months ago
- ☆45Updated 5 months ago
- A project for fuzzing HTTP/1.1 CL.0 Request Smuggling Attack Vectors☆89Updated last year
- POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.☆33Updated last year
- ☆38Updated 2 months ago
- Authentication Bypass in GoAnywhere MFT☆63Updated last year
- Exploit for CVE-2024-20767 - Adobe ColdFusion☆34Updated 8 months ago
- CVE-2023-21554 Windows MessageQueuing PoC，分析见 https://www.zoemurmure.top/posts/cve_2023_21554/☆56Updated 2 years ago
- The authentication bypass vulnerability in GitHub Enterprise Server (GHES) allows an unauthorized attacker to access an instance of GHES …☆50Updated last year
- Exploit for Symfony CVE-2024-50340 (forked eos)☆30Updated 9 months ago
- Proof of Concept for Path Traversal in Apache Struts ("CVE-2023-50164")☆57Updated last year
- Script to exploit Grafana CVE-2025-4123: XSS and Full-Read SSRF☆45Updated last month
- Unauthorized Access to Metadata and User Data like CTF☆27Updated 8 months ago
- Proof of Concept Exploit for CVE-2024-9464☆45Updated 10 months ago
- OpenSSH Pre-Auth Double Free CVE-2023-25136 POC☆45Updated 2 years ago
- ☆13Updated last year
- CVE-2024-27956 WordPress Automatic < 3.92.1 - Unauthenticated SQL Injection☆18Updated last year
- CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)☆40Updated 6 months ago
- Burp extension to track your current IP address. Extension focused for red teams where the attacker needs to log all used IP addresses.☆25Updated last year
- Progress Telerik Report Server pre-authenticated RCE chain (CVE-2024-4358/CVE-2024-1800)☆77Updated last year
- PoC for CVE-2024-27130☆35Updated last year
- Nuclei templates for source code analysis. Detects hardcoded secrets, config leaks, debug endpoints. Also helps identify OWASP Top 10 iss…☆76Updated 2 months ago
- An Vulnerability detection and Exploitation tool for CVE-2024-24919☆25Updated last year
- Keycloak admin API allows low privilege users to use administrative functions☆27Updated 10 months ago
- POC for CVE-2024-34102. A pre-authentication XML entity injection issue in Magento / Adobe Commerce.☆32Updated last year