Apache-OFBiz-Directory-Traversal-exploit
absholi7ly/apache-ofbiz-directory-traversal-exploitvulnerability-analysisexploitationweb-application-exploitation+3
16
Tools for extracting sensitive data from compromised systems without detection.
absholi7ly/apache-ofbiz-directory-traversal-exploit
badsectorlabs/sccm-http-looterFind interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)
infosecn1nja/veiltransferVeilTransfer is a data exfiltration utility designed to test and enhance the detection capabilities. This tool simulates real-world data exfiltration…
meckazin/chromekatzDump cookies and credentials directly from Chrome/Edge process memory
darkspacesecurity/ssh-stealerSmart keylogging capability to steal SSH Credentials including password & Private Key
b3rito/peekopeeko – Browser-based XSS C2 for stealthy internal network exploration via infected browser.
octoberfest7/zip_smugglingPython3 utility for creating zip files that smuggle additional data for later extraction
hackerschoice/thc-tips-tricks-hacks-cheat-sheetVarious tips & tricks
matheuzsecurity/ringreaperLinux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.
george0papasotiriou/cve-2026-21002-serverless-cold-start-credential-leakage-via-reused-tmp
george0papasotiriou/cve-2026-21004-sqlite-fts3-match-infoleak-via-query-crafting
george0papasotiriou/cve-2026-21015-php-filter-chain-arbitrary-file-read
sowarma/wp2shell-pocCVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept
portswigger/css-the-bomb-inside-your-inboxAll the materials for Gareth Heyes' Black Hat talk: CSS: the bomb inside your inbox.
v3s9er/cve-2026-52886Notepad++ CVE-2026-52886 — session.xml backupFilePath starts_with() path traversal (GHSA-rqfm-pw34-r7j6)
sunynov/cve-2026-39363方便实用的CVE-2026-39363利用工具
ttpreport/siphondnsCovert data exfiltration via DNS