Web Application Exploitation

loaxert/cve-2025-59528-poc

PoC for CVE-2025-59528 used to achieve remote code execution on the Silentium machine at HTB

eh-amish/cve-2026-64638-xss-to-shell-poc

Validates pre-authentication reflected XSS in WordPress, fingerprints vulnerable versions, checks payload reflection and JSONP, and generates…

0xdak/cve-2026-68771_exploit

Unauthenticated exploit for CVE-2026-68771, a pickle deserialization RCE in ComfyUI. Plants a crafted shard via /upload/image, triggers it through…

ch4120n/cve-2026-15409

Proof-of-Concept exploit for CVE-2026-15409 (SonicWall SMA 1000 RCE) via Erlang distribution over WebSocket. Achieves unauthenticated remote code…

ch4120n/cve-2026-3891

PoC for CVE-2026-3891 – Unauthenticated File Upload RCE in Pix for WooCommerce ≤ 1.5.0. Automated nonce retrieval, PHP upload, and command execution.

princeh4k/spring4shell-poc

Proof of Concept for exploiting the CVE-2022-22965 (Spring4Shell) vulnerability in an isolated environment, with Remote Code Execution (RCE)…

sam00/poc-cve-2026-32621-apollo-federation-xss-vulnerability

PoC exploit for CVE-2026-32621 demonstrating Apollo Federation deepMerge prototype pollution via crafted GraphQL aliases, with patched-version tests.

arpeetrathii/50-days-of-sqli

Learning and hunting SQL injection bugs for 50 continuous days

delbertgiovanni/test-xss-swagger-cve-2019-1749

PoC for testing reflected XSS in Swagger UI via CVE-2019-1749; sends crafted payloads and verifies vulnerable endpoints with minimal setup.

daffainfo/oneliner-bugbounty

A collection oneliner scripts for bug bounty

sourceincite/randy

A pre-authenticated RCE exploit for Inductive Automation Ignition

p0dalirius/awesome-rce-techniques

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

palindromelabs/awesome-websocket-security

Awesome information for WebSockets security research

sourceincite/dashoverride

This is a pre-authenticated RCE exploit for VMware vRealize Operations Manager

jbaines-r7/cisco_asa_research

Cisco ASA Software and ASDM Security Research

star-sg/cve

A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others.

rootsecdev/oscp

OSCP Study Guide