#1Tools for creating, managing, and analyzing fake login pages and email campaigns.
Kitploit recommended
openxp-research/cve-2022-2546All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS + CSRF
samsayen/jqueryinguValid JQuery that profiles the system and returns info to the server in a fake analytics GET request
0pts/cve-2023-0214Secure Web Gateway 10.2.11 - Cross-Site Scripting (XSS)
sanupl/letterpress-1.2.1-open-redirection-via-html-injection-vulnerabilityIn LetterPress plugin <= 1.2.1 is vulnerable to Html Injection Vulnerability which can futher leads to Open Redirection Vulnerabilty.
amirzargham/cve-2024-37383-exploitRoundcube mail server exploit for CVE-2024-37383 (Stored XSS)
am0nt31r0/password-analysisScript in Go that analyzes a list of passwords based on in its entropy and weak passwords from a dictionary. Useful for penetration tests and…
geozin/poc-cve-2018-25031Proof-of-concept exploit for CVE-2018-25031 (Swagger UI XSS) that exfiltrates authorization codes via crafted configUrl/url parameters.
h3x0v3rl0rd/xll_windows_reverse_shellxll windows reverse shell
spiralbl0ck/ios-safari-mallicous-extension-exampleExample on how to injection(currently under work) of keylogger js through Safari Extension(that part done)
eqstlab/cve-2024-25293mjml-app v3.0.4 & 3.1.0-beta RCE exploit
harshit-mashru/itop-cves-exploitThis repository contains exploits for iTOP CVE-2024-52002, 52000, 31998, 31448 that involve CSRF+XSS chaining to get RCE
b0marek/cve-2023-4549Repository for CVE-2023-4549 vulnerability.
cyber-wo0dy/cve-2023-49052Microweber version 2.0.4 vulnerable to "Uploading Malicious Files"
mbadanoiu/cve-2020-13965CVE-2020-13965: Cross-Site Scripting via Malicious XML Attachment in Roundcube Webmail
s1lkys/cve-2021-40101Survey XSS combined with CSRF leads to Admin Account Takeover in Concrete5 8.5.4
sromanhu/cve-2023-44767_ritecms-file-upload--xss---filemanagerRiteCMS 3.0 is affected by File Upload - XSS vulnerability that allows attackers to upload a PDF file with a hidden XSS that when executed will…
sromanhu/cve-2023-44763_concretecms-arbitrary-file-upload-thumbnailConcreteCMS v.9.2.1 is affected by Arbitrary File Upload vulnerability that allows Cross-Site Scriting (XSS) Stored.
