mauricelambert/PythonSubprocessVulnerabilityPOC mauricelambert/PythonSubprocessVulnerabilityPOC

  • Stars
    star
    1
  • Language
    Python
  • Created almost 2 years ago
  • Updated almost 2 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
mauricelambert/PythonSubprocessVulnerabilityPOC
github

mauricelambert

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

I found a vulnerability in supbrocess module, this vulnerability can be exploited to exploit a RCE (Remote Code Execution)

More Repositories

1

SpyWare

This package implements a complete SpyWare.
Python
67
star
2

CVE-2022-21907

CVE-2022-21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit. Detection and protection: Powershell. Demonstration: Youtube.
Ruby
27
star
3

PyObfuscator

This module obfuscates python code.
Python
18
star
4

MaliciousPDF

This file implements a library and tool to make malicious PDF files.
Python
10
star
5

WebScripts

This tool runs scripts and display the result in a Web Interface.
Python
10
star
6

PasswordsSniffer

This module sniff username and password of unprotected protocols.
Python
8
star
7

AsyncPortScanner

Asynchronous port scanner written in Nim.
Nim
7
star
8

OSPF_bruteforce

This repository performs a dictionnary attack against OSPF MD5 authentication using scapy.
Python
7
star
9

NetworkScanner

This package implements an asynchronous network scanner.
Python
7
star
10

CVE-2021-31166

CVE-2021-31166: exploitation with Powershell, Python, Ruby, NMAP and Metasploit.
Ruby
5
star
11

ReverseShell

This package implements an advanced reverse shell console (supports: TCP, UDP, IRC, HTTP and DNS).
Python
4
star
12

NetbiosSpoof

This package implements a Netbios Spoofer (Netbios, LLMNR, DNS Local).
Python
4
star
13

EntropyEncoding

This package implements an encoding to bypass entropy antivirus check.
Python
4
star
14

ArpSpoof

This package implements a ARP Spoofer (for MIM attack).
Python
3
star
15

FastRC4

Optimized implementation of RC4 (Rivest Cipher 4, ARCFOUR) in ASM (x64) for Linux and Windows.
Assembly
3
star
16

ChromePasswordsStealer

This module steals chrome and chromium passwords on Windows.
Python
3
star
17

ProgramExecutableAnalyzer

This script analyzes MZ-PE (MS-DOS) executable file
Python
3
star
18

PDForensic

This package analyses PDF files for Forensic Investigations.
Python
2
star
19

CLEF

Collect Linux Evidences for Forensics and investigations.
Shell
2
star
20

SimpleHttpProxy

This package implements a simple HTTP(S) proxy.
Python
2
star
21

RC4Encryption

This package implements RC4 encryption.
Python
2
star
22

SteganograPy

This package hide text or bytes in image.
Python
2
star
23

WifiDeauth

This package implement a Dos attack on Wifi named Deauth.
Python
2
star
24

FirefoxHardening

CIS based hardening for Mozilla Firefox browser.
Perl
2
star
25

PowerShellAsyncPortScan

PowerShell library to scan TCP ports faster (asynchronous).
PowerShell
2
star
26

WebScriptsTools

This package implements tools for WebScripts Scripts.
Python
2
star
27

UpgradePipPackages

This package is a tool to upgrade python packages faster and easiest.
Python
2
star
28

ElfAnalyzer

This module parses and analyzes ELF file for Forensic and investigations.
Python
2
star
29

PeInjector

This python tool injects shellcode in Windows Program Executable to backdoor it with optional polymorphism.
Python
2
star
30

RootkitDetector

This repository implements little programs to help SOC analyst to detect rootkit.
Go
2
star
31

EicarSpam

Cross-platform scripts/DLLs/programs/modules to test your antivirus software with Eicar files called from different processes and different ways.
HTML
2
star
32

CustomShell

This package implements a Custom terminal using python.
Python
2
star
33

WebScriptsClient

This package implements the "official" WebScripts client. This package implements client for default WebScripts features.
Python
2
star
34

WebScriptsWebShell

Install a WebShell on hardened and deployed WebScripts (using Apache and mod_wsgi).
Python
1
star
35

RansomWare

This package implement a RansomWare.
Python
1
star
36

CVE-2021-42013

These Nmap, Python and Ruby scripts detects and exploits CVE-2021-42013 with RCE and local file disclosure.
Ruby
1
star
37

PyWCGIshell

This package implement a WebShell for CGI and WSGI server.
Python
1
star
38

WebScriptsContainers

Dockerfile for WebScripts project.
Dockerfile
1
star
39

AsyncRemoteShell

This python 3 package implement 4 tools for asynchronous remote commands.
Python
1
star
40

PyProgressTerm

This package implement a customizable progress bar and rotating animation.
Python
1
star
41

PacketAnalysis

This package implement Packet Analysis with network sniffer or pcap file reader.
Python
1
star
42

WitchContainer

Witch (HTTP server) docker file.
Dockerfile
1
star
43

PythonToolsKit

This package implements useful tools and functions for producing python packages or tools implemented in python.
Python
1
star
44

WordListGenerator

This package builds custom WordLists (for BruteForce).
Python
1
star
45

ZipSteganograPy

This tool hides a ZIP archive in an image.
Python
1
star
46

NetworkSniffer

This module sniffs network communications without any requirements
Python
1
star
47

Cr0wl3r

Full and discreet web crawler for pentest, red-teaming or hacking discovery using simple HTTP request or selemium.
Python
1
star
48

CVE-2021-41773

These Metasploit, Nmap, Python and Ruby scripts detects and exploits CVE-2021-41773 with RCE and local file disclosure.
Ruby
1
star
49

CsvParserLibrary

DLL/SharedLibrary to parse CSV data written in C
C
1
star
50

Shell-Exploit-Umbraco

This module implements a shell to exploit a RCE in umbraco CMS.
Python
1
star
51

SynFlood

This package implements a DOS (Denial Of Service) tool in python (SYN Flood).
Python
1
star
52

DiskCloner

This repository implements a cross-platform disk cloner written in C and an optional python CLI.
Python
1
star
53

Tracert

This package implements a traceroute tool faster than traceroute/tracert executable
Python
1
star
54

EmojiEncode

This module encodes and decodes data into partially random Unicode Emoji, it's like a steganography in message or social network.
Python
1
star
55

Vulnerability1-XSS-title

I found a XSS vulnerability in the title of simpletouchsoftware.com/timers/boxingtimerpro/ application.
HTML
1
star
56

RC6Encryption

This package implements the RC6 encryption.
Python
1
star
57

EntropyAnalysis

This package analyzes file entropy (shannon entropy) for forensic and malware analysis.
Python
1
star
58

MaliciousFileDetector

This scripts detects suspicious and probably malicious files used to attack your system.
Go
1
star
59

BTS-SIO-SLAM-CYBER-INTERVENTION

You will find all the files to prepare a security intervention in a BTS SIO (SLAM - development part). This training aims to highlight the role of the developer in cybersecurity. Different software vulnerabilities are presented as well as the good practices that allow limiting them. To this goal, some aspects of a secure system design are addressed.
Python
1
star