MongoBleed-exploit
eljoamy/mongobleed-exploitMongoBleed (CVE-2025-14847) Lab & PoC : A complete educational environment to reproduce the critical unauthenticated memory leak in MongoDB. Includes…
memory-forensicsvulnerability-analysisexploitation+5
Database assessment, SQL injection testing, auditing, encryption, and activity monitoring tools.
eljoamy/mongobleed-exploitMongoBleed (CVE-2025-14847) Lab & PoC : A complete educational environment to reproduce the critical unauthenticated memory leak in MongoDB. Includes…
gojue/ecaptureCapturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
n3rada/mssqlandIn-target C# post-exploitation tool for Microsoft SQL Server (MS SQL / MSSQL) traversing linked-server chains of any depth with cascading login…
mthamil107/db_audit_researchSelf-Defeating Audits: reproducible lab showing a low-privilege PostgreSQL role reversibly blinding a trigger-based auditor + poisoning attribution…
hackspeak/cve-2026-23479Redis UAF RCE PoC collection for CVE-2026-23479: safe version checker, exploit module, GDB-assisted PoC, and Sigma detection rules for authorized…
hackspeak/cve-2026-14669Proof-of-concept exploit for CVE-2026-14669, a PostgreSQL to_char() timezone abbreviation heap buffer overflow enabling RCE through information leak…
aleewyy/cve-2025-49132Minimal proof-of-concept exploit for CVE-2025-49132 in Pterodactyl panels; reads PHP files to extract database credentials and enable unauthorized…
vognik/cve-2026-26980Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…
toanln-cov/cve-2026-74251Unauthenticated SQL Injection via Attribute Filter in Phoca Cart
ubitquity/metabase-setup-endpoint-sqli-fixFixes unauthenticated SQL injection in a setup endpoint by replacing raw JDBC queries with ORM parameterization and constant-time token validation.
vuxnx/cve-2026-72898Proof-of-concept exploit for CVE-2026-72898, targeting Toucan2 behavior with malformed map options to reproduce the vulnerability and validate…
aramosf/cve-2026-24031Self-contained Python PoC for Dovecot SQL authentication bypass: logs in as any user without the real password and enumerates usernames on vulnerable…
dbeaver/dbeaverFree universal database tool and SQL client
sqlmapproject/sqlmapAutomatic SQL injection and database takeover tool
jumpserver/jumpserverJumpServer is an open-source Privileged Access Management (PAM) platform that provides DevOps and IT teams with on-demand and secure access to SSH,…
gravitational/teleportThe easiest, and most secure way to access and protect all of your infrastructure.
sjzar/chatlogchat log tool, easily use your own chat data. 聊天记录工具，轻松使用自己的聊天数据
decalage2/awesome-security-hardeningA collection of awesome security hardening guides, tools and other resources