Exploitation

eljoamy/mongobleed-exploit

MongoBleed (CVE-2025-14847) Lab & PoC : A complete educational environment to reproduce the critical unauthenticated memory leak in MongoDB. Includes…

wattocyber/offensive-one-liners

110 offensive security one-liners for authorized testing and CTFs, organized in one markdown notebook by category and kill-chain step. Dual-use…

k0nnect/halo-cve-2026-67919

halo cms plugin 1-request rce from a url, PoC + exploit chain

l0u7r3/certighost

Proof-of-concept exploit code for CVE-2026-54121, adapted and edited for validating the vulnerability in affected environments.

superman-l/cve-2026-16723

Reproduces fastjson 1.2.83 @JSONType RCE with a vulnerable Spring Boot target and ASM-based payload generator using HTTP or file protocol jar chains.

deadexpl0it/cve-2026-19598-poc

Proof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9.

graysignal/apache-ofbiz-auth-bypass-and-rce-exploit-cve-2023-49070-cve-2023-51467

This exploit scans whether the provided target is vulnerable to CVE-2023-49070/CVE-2023-51467 and also exploits it depending on the choice of the…

minanagehsalalma/cve-2026-6837-zyxel-export-cgi-command-injection

Public writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling.

strategic-automation/violin

Agentic pentest profile for Hermes: 31 playbooks for authorised recon, web/access-control attacks, safe exploit validation, and evidence-driven…

swisskyrepo/payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

vxcontrol/pentagi

Fully autonomous AI Agents system capable of performing complex penetration testing tasks

s0md3v/xsstrike

Most advanced XSS scanner.

threat9/routersploit

Exploitation Framework for Embedded Devices

manisso/fsociety

fsociety Hacking Tools Pack – A Penetration Testing Framework

livecontainer/livecontainer

Run iOS apps without actually installing them!

malwaredllc/byob

An open-source post-exploitation framework for students, researchers and developers.

byt3bl33d3r/crackmapexec

A swiss army knife for pentesting networks

axi0mx/ipwndfu

open-source jailbreaking tool for many iOS devices