Data Exfiltration

synacktiv/gh-hijack-runner

A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.

0xc01df00d/collabfiltrator

Exfiltrate blind Remote Code Execution and SQL injection output over DNS via Burp Collaborator.

integration-it/active-directory-exploitation-cheat-sheet

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

b1ack0wl/miniupnpd_poc

Read out-of-bounds PoC for miniupnpd <= v2.1

synacktiv/keebcap

Win32 keylogger that supports all (non-ime using) languages correctly

networkkiller/cve-2025-9223

POC CVE-2025-9223

ianxtianxt/ecologyexp.jar

泛微oa数据库配置文件读取

5kr1pt/glpi-logbleed

PoC for CVE-2026-53629, blind SQL injection in the GLPI history log filter

rails/rails-forensics-cve-2026-66066

Forensic toolkit and agent skills for investigating Rails Active Storage/libvips CVE-2026-66066: detects crafted blob indicators, exposure windows,…

synacktiv/nord-stream

Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports…

darabium/cve-2024-28987

**CVE-2024-28987** is a critical vulnerability in SolarWinds Web Help Desk (WHD) that allows remote attackers to access sensitive ticket information…

spiralbl0ck/lame_old_keylogger

lame old keylogger

vikasudasi/exfil-scan

Scan LLM outputs and AI-generated content for data exfiltration signals (EchoLeak, CVE-2025-32711) before they reach users or downstream systems

themehackers/cve-2026-22804

This repository contains a Proof of Concept (PoC) exploit for the Stored Cross-Site Scripting (XSS) vulnerability in Termix, which can lead to Local…

blue0x1/sqlwinds

SQLWinds - SQL Server Security Assessment & Post-Exploitation Toolkit

6mile/gimmepatz

Personal Access Token (PAT) recon tool for bug bounty hunters, pentesters & red teams