Tools

saykino/cve-2025-56219

Detailed advisory for CVE-2025-56219, a rate-limiting flaw in Ascertia SigningHub's Add User API, enabling automated user creation and denial of…

irsdl/iis-shortname-scanner

latest version of scanners for IIS short filename (8.3) disclosure vulnerability

bitquark/shortscan

Fast IIS short filename enumeration tool that identifies hidden files and directories via tilde vulnerability, with automatic full filename…

tnkr/poc_monitor

A short scraper looking for a POC of CVE-2024-49112

omaratallahh/cve-2023-23138

short view of ruby on rails properties misconfiguration

dark-ninja10/log4j-cve-2021-44228

On Thursday (December 9th), a 0-day exploit in the popular Java logging library log4j (version 2) was discovered that results in Remote Code…

moham3driahi/th3inspector

Th3Inspector 🕵️ Best Tool For Information Gathering 🔎

kulkansecurity/gitxray

A multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.

owasp/vbscan

OWASP VBScan is a Black Box vBulletin Vulnerability Scanner

decaf-project/decaf

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope…

felix-pb/kfd

kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices.

shinthink/cve-2026-61424

DJ-Classifieds Joomla Component Unauthenticated File Upload RCE. 3-string filter bypass via PHP short tags. CVSS 10.0 | CWE-434 | com_djclassifieds <…

gmikisilva/cve-2024-33901-proofofconcept

Short program that demonstrates the vulnerability CVE-2024-33901 in KeePassXC version 2.7.7

bsdrip/cve-2025-24000-exploit

Short Python script for exploiting CVE-2025–24000 based on this blog post: https://medium.com/@security_56355/from-subscriber-to-admin-reproducing-cve…

sincidk/cve-2012-2982-exploit-script

A short and sweet simple exploit script for the CVE-2012-2982 Authenticated RCE vulnerability in the /file/show.cgi/bin endpoint.

phoswald/sample-ldap-exploit

A short demo of CVE-2021-44228

commixproject/commix

Automated All-in-One OS Command Injection Exploitation Tool