Penetration Testing

ari034/cve-2020-9758

Form submission for vulnerability in livezilla

1337skid/cve-2025-65271

PoC for CVE-2025-65271 | Found by me

jmbowes/nextsecurescan

Next.js CVE-2025-29927 Vulnerability Scanner

bugch3ck/imposter

Proof of concept for CVE-2015-0006. Fixed in MS15-005 https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2015/ms15-005 .

randomrobbiebf/cve-2024-9935

PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Unauthenticated Arbitrary File Download

oopnv70-lab/ghostlock-honor-aak

GhostLock (CVE-2026-43499) exploit adapted for Honor AAK-AN00 (MagicOS 10, kernel 6.6.89-android15)。无限期停止更新。

spbavarva/cve-2025-46203

PoC of CVE-2025-46203

prettyrecon/cve-2021-26084_confluence

CVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection 回显

jet-pentest/cve-2021-3131

Proof-of-concept for CVE-2021-3131: credential disclosure via base64-encoded credentials in URL parameter of 1C:Enterprise 8 web server.

imbas007/cve-2025-25257

Python-based exploit tool for CVE-2025-25257 in FortiWeb. Automates SQL injection detection, webshell upload, and remote command execution on…

grecosamuel/cve-2024-32002

Proof-of-concept exploit for CVE-2024-32002, demonstrating RCE via git clone with malicious submodules and symlinks on case-insensitive filesystems.

asterite3/cve-2020-13640

CVE-2020-13640 - SQL injection in wpDiscuz WordPress plugin <= 5.3.5

salehlardhi/cve-2024-24919

Nuclei template to detect CVE-2024-24919 by checking for /etc/shadow file leakage, enabling automated vulnerability scanning and security assessment.

d0n601/pwncity

Insecure TeamCity CI environment for hands-on penetration testing training: reconnaissance, credential theft, privilege escalation, and lateral…

mauzy0x00/velociraptor_cve-2025-6264_poc

Proof-of-concept exploit for CVE-2025-6264 in Velociraptor, demonstrating privilege escalation via missing permission checks to redirect clients to a…

shoucheng3/apache__sling-org-apache-sling-servlets-resolver_cve-2024-23673_2-10-0

Analysis and exploitation code for CVE-2024-23673, a vulnerability in Apache Sling Servlet Resolver, enabling targeted security testing of…

seqred-s-a/cve-2020-29007

Remote code execution in Mediawiki Score