Phishing Tools

dereeqw/web-mitm-lab

Web traffic interception simulation tool for cybersecurity research and defensive learning in isolated lab environments.

certainlyp/clipguard

A lightweight tool designed to stop clickfix attacks by using clipboard formatting with execution surface checks

s1lkys/cve-2021-24884

If an authenticated user who is able to edit Wordpress PHP code in any kind, clicks a malicious link, PHP code can be edited through XSS in…

s1lkys/cve-2021-40101

Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4

ronixxcybsec0101/cve-2025-25461

SeedDMS Stored Cross Site Scripting(XSS)

bronzebee/cve-2023-23397

Python script for sending e-mails with CVE-2023-23397 payload using SMTP

bhanunamikaze/cve-2024-42009

This Proof of Concept (PoC) demonstrates an exploit for CVE-2024-42009, leveraging a cross-site scripting (XSS) vulnerability to extract emails from…

ash1996x/cve-2025-50154-aggressor-script

Cobalt Strike Aggressor script that weaponizes LNK and Library-MS files to trigger SMB NTLMv2 hash disclosure, including CVE-2025-24054 bypass, for…

34zy/apt-backpack

cve-2019-11510, cve-2019-19781, cve-2020-5902,               cve-2021-1497, cve-2021-20090, cve-2021-22006, cve-2021-22205, cve-2021-26084,…

0xflagplz/ms-msdt-office-rce-follina

CVE-2022-30190 | MS-MSDT Follina One Click

sheeki03/tirith

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and…

whispergate/infraguard

InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution

alchemist3dot14/cve-2025-2783

Simulated PoC for CVE-2025-2783 — a sandbox escape vulnerability in Chrome's Mojo IPC. Includes phishing delivery, memory fuzzing, IPC simulation,…

0xaj2k/cve-2020-11022-cve-2020-11023

Little thing put together quickly to demonstrate this CVE

chrxstxqn/cve-2025-6218-winrar-rce-poc

Comprehensive analysis and proof-of-concept for CVE-2025-6218 - WinRAR path traversal RCE vulnerability affecting versions 7.11 and earlier

raffli-dev/cve-2023-41425

Exploit for Wonder CMS XSS to RCE (CVE-2023-41425) with theme upload and reverse shell payloads.

relichunt3r/swagger-ui

Swagger UI (CVE-2018-25031) POC, [HTMLi, XSS].

retr0-code/signhere

SignHere is implementation of CVE-2017-11882. SignHere is builder of malicious rtf document and VBScript payloads.