Nicolas Krassas

CVE-2022-22963. CVE-2022-22963 PoC

hikvision. Hikvision log4j PoC

CVE-2024-20931. CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839

spring-core-rce. Spring core rce

synackDUO. Python Duo Push API

top_Hibp_passwords. Top passwords as per HaveIBeenPwned

proxyshell. A basic proxylogon scanner

synack_burp.

burp-mcp-server. Kotlin

citrix_cve-2023-4966. Citrix CVE-2023-4966 from assetnote modified for parallel and file handling

sap. Collection of SAP resources for penetration testing

netscaler-startwebview. Netscaler simple python exploit for mass checks

kubei. Kubei is a flexible Kubernetes runtime scanner, scanning images of worker and Kubernetes nodes providing accurate vulnerabilities assessment, for more information checkout:

ysoserial.net-docker. ysoserial.net docker image

SecurityTips.

weblogic. Weblogic exploits

go_snmp_scanner. Ultra fast snmp scanner on go

SSRF-Testing. SSRF (Server Side Request Forgery) testing resources

jolokia-exploitation-toolkit. jolokia-exploitation-toolkit

SpoolFool. Exploit for CVE-2022–22718 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

maigret. 🕵️‍♂️ Collect a dossier on a person by username from thousands of sites

get_subdomains. Simple script to get subdomain information given a domain name using securitytrails API