#1Tools for creating, managing, and analyzing fake login pages and email campaigns.
Kitploit recommended
youmulijiang/evil-winrarevil-winrar,CVE-2023-38831漏洞利用和社会工程学攻击框架 (evil-winrar, CVE-2023-38831 Vulnerability Exploitation and Social Engineering Attack Framework)
omarothmann/embedded-backdoor-connectionThis demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists…
yuyudhn/blindxss-liteA lightweight Blind XSS (Cross-Site Scripting) collector and payload server built with Flask
mathis2001/cve-2018-25031CVE-2018-25031 tests
retr0-code/signhereSignHere is implementation of CVE-2017-11882. SignHere is builder of malicious rtf document and VBScript payloads.
bardlaudian/cve-2025-24071Dependency-free Python PoC generator for CVE-2025-24071 that crafts a malicious .library-ms file in a ZIP to trigger Windows Explorer NTLM hash…
vighnesh91/severitasAuthorized social-engineering simulation framework with an isolated loopback lab, synthetic audience generation, pre-flight authorization checks, and…
danithehack3r/cve-2024-42009-pocCVE-2024-42009 Proof of Concept
tea-on/cve-2023-41425-rce-wondercms-4.3.2Automates creation and hosting of a JavaScript XSS payload to install a malicious theme module, triggering a reverse shell via Remote Code Execution…
g33xter/cve-2021-28079Proof-of-concept exploit for XSS vulnerability in Jamovi <=1.6.18. Demonstrates crafting malicious .omv documents with JavaScript payloads to achieve…
ahmetkarakayaoffical/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerabilityBu betik, Microsoft Outlook'ta keşfedilen ve CVSS değeri 9.8 olan önemli bir güvenlik açığı olan CVE-2024-21413 için bir kavram kanıtı (PoC)…
quinnbast/malicious-mcpA Proof-of-concept repository showing how an untrusted MCP server can steal literally everything...
bartfroklage/cve-2024-37383-pocProof of concept for CVE-2024-37383
unhackerencapital/pdfernetremoteloPoC - Prueba de Concepto de CVE-2024-4367 en conjunto al CVE-2023-38831 en un solo Script
v35hr4j/cve-2022-1597The plugin, used as a companion for the Discy and Himer themes, does not sanitise and escape a parameter on its reset password form which makes it…
