#1Tools for simulating human-based attacks (phishing, pretexting, baiting) and testing human factors in security.
Kitploit recommended
elenichristopoulou/poc-cve-2026-20841Proof-of-concept exploit for CVE-2026-20841, a Windows Notepad remote code execution vulnerability, using a crafted .md file and social engineering…
mexeck88/csrf-via-stored-xss-for-privescChamilo-LMS (v2.0) CVE-2025-26153
mbanyamer/cve-2026-27579-collabplatform-appwrite-cors-misconfigurationExploit PoC for CVE-2026-27579, a CORS misconfiguration in Appwrite backend, demonstrating credentialed account data theft via malicious phishing…
andrewd-cg/cve-2024-52005-pocProof-of-Concept for CVE-2024-52005: ANSI escape sequence injection in Git. Demonstrates incorrect 'not_affected' VEX claims in hardened container…
dionissh/cve-2024-21413Proof-of-concept exploit for Microsoft Outlook RCE (CVE-2024-21413) with SMTP-based phishing email delivery, malicious RTF attachment generation, and…
rxerium/bash-bunny-payloadsPersonally crafted Bash Bunny Payloads
roj1py/cve-2024-47875-phpspreadsheet-xss-pocThis is a PoC/Exploit for the CVE-2024-47875 PhpSpreadsheet XSS Vuln
relichunt3r/swagger-uiSwagger UI (CVE-2018-25031) POC, [HTMLi, XSS].
mrk336/cve-2021-3456A practical chain that starts with an innocuous PDF file and ends up in a reverse shell on an AWS EC2 instance
shndnth/cve-2022-30190Educational Proof-of-Concept for the CVE-2022-30190 (Follina) vulnerability.
gcabc123/blackbirdAn OSINT tool to search for accounts by username in social networks.
thawkhant/viber-desktop-html-injectionPublic writeup for CVE-2025-55996 (Viber Desktop HTML Injection)
reggyraider/cve-2023-21716CVE-2023-21716 - Microsoft Word RTF fonttbl Heap Corruption RCE exploit with reverse shell payload
kl4v3/axiom-protocolThe goal of Axiom is to provide a completely anonymous, decentralized, and censorship-resistant social media platform. To make this possible, the…
shacode/olyx🔗 Lightweight security orchestrator mobile application for URI vetting, providing a unified, multi-engine interface to aggregate and validate link…
cappricio-securities/socialengineering-templatesa SET framework templates
d7x/cve-2020-12432Proof-of-concept exploit for stored XSS and insecure permissions in Collabora CODE <= 4.2.2 via the Vereign WOPI API, enabling account hijacking and…
openxp-research/cve-2022-47132Academy LMS <= 5.10 CSRF
