Penetration testing methodologies, frameworks, reporting, and automation tools.
sanr01/cve-2021-41773-exploit-labReproduces CVE-2021-41773 path traversal in Apache HTTP Server 2.4.49, with PoC code, root-cause analysis, impact assessment, and mitigation guidance…
ghostpels/cve-2026-13610Exploit PoC for unauthenticated doctor/receptionist account creation in the KiviCare WordPress plugin via improper privilege management, providing…
harshiys/cve-2007-2447-exploitation-siem-detection-labIsolated AD/Linux attack lab: exploited CVE-2007-2447 via Metasploit, detected with Wazuh SIEM mapped to MITRE ATT&CK (T1190, T1059)
isukasanuj/cve-2025-70559Python exploit for CVE-2025-70559 targeting an upload directory bypass/remote code execution; run with LHOST and LPORT to establish a reverse shell.
mermehr/mouseserver-1.7.8.5-rcePoC exploit for CVE-2022-3218 targeting WiFi Mouse Server 1.7.8.5, achieving RCE via keystroke injection and in-memory PowerShell payload delivery…
mreza-en/cve-2021-21994_pocValidates and exploits VMware ESXi SFCB authentication bypass (CVE-2021-21994) via a probe/fuzz harness, enabling unauthenticated CIM-XML enumeration.
horkimhab/cve-2026-58231Validates and confirms the presence of CVE-2026-58231 in authorized environments via a lightweight Python script for vulnerability research,…
horkimhab/cve-rubyRuby 4.0 Universal RCE Deserialization Gadget Chain - Draft or TODO
k3ystr0k3r/cve-2026-31816PoC exploit for critical Budibase auth bypass: unanchored webhook regex lets attackers append ?/webhooks/trigger, reach protected APIs, and chain…
cybertix-pvt-ltd/one-liner-collectionsThis Repositories contains list of One Liners with Descriptions and Installation requirements
trustedsec/elfloaderLoads and runs ELF objects entirely in memory across x86_64/x86 Linux systems, resolving libc symbols at runtime for stealthy post-exploitation…
sabir555s/insta_cyberPerforms dictionary-based brute-force login attacks against Instagram accounts using Python, with optional Tor support for anonymized authorized…
horkimhab/cve-2026-53413Educational CVE proof-of-concept repository with setup guidance for authorized vulnerability research using virtual machines, Docker, and isolated…
glebusalt/cybersecurity_portfolioПрактические кейсы по информационной безопасности: развёртывание SIEM Wazuh и эксплуатация CVE-2021-41773
cves-labs/cve-2026-21877Dockerized vulnerable lab environment with a Python-based network monitor and dedicated exploit script, enabling hands-on exploitation, privilege…
omribaso/sccm-cve-2026-47301-remote-code-execution-exploitProof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path…
oxstussz-eng/kerberos-cve-2026-27912PoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security…
nanashibx2/bx2-writeupsCybersecurity writeups, walkthroughs, and technical notes by Nanashi Bx2.
