Black-Tool
mrprogrammer2938/black-toolInstall the tools and start Attacking , black-tool v5.5.5 ! ⬛
penetration-testing-frameworksphishing-toolspassword-attacks+4
641
Tools for testing, exploiting, and securing web applications and APIs.
mrprogrammer2938/black-toolInstall the tools and start Attacking , black-tool v5.5.5 ! ⬛
ctxis/crackerjackCrackerJack / Hashcat Web Interface / Context Information Security
damian89/extended-xss-searchA better version of my xssfinder tool - scans for different types of xss on a list of urls.
mfmokbel/crawlectorCrawlector is a threat hunting framework designed for scanning websites for malicious objects.
hahwul/mzap⚡️ Multiple target ZAP Scanning
sobri3195/pegasus---forbidden-busterA penetration testing tool for bypassing HTTP 401/403 responses using various header manipulation techniques and path fuzzing.
bigzooooz/cve-2023-26692ZCBS/ZBBS/ZPBS v4.14k - Reflected XSS
wattocyber/offensive-one-liners110 offensive security one-liners for authorized testing and CTFs, organized in one markdown notebook by category and kill-chain step. Dual-use…
k0nnect/halo-cve-2026-67919halo cms plugin 1-request rce from a url, PoC + exploit chain
superman-l/cve-2026-16723Reproduces fastjson 1.2.83 @JSONType RCE with a vulnerable Spring Boot target and ASM-based payload generator using HTTP or file protocol jar chains.
deadexpl0it/cve-2026-19598-pocProof of Concept for CVE-2026-19598 affecting Pods <= 3.3.9.
graysignal/apache-ofbiz-auth-bypass-and-rce-exploit-cve-2023-49070-cve-2023-51467This exploit scans whether the provided target is vulnerable to CVE-2023-49070/CVE-2023-51467 and also exploits it depending on the choice of the…
minanagehsalalma/cve-2026-6837-zyxel-export-cgi-command-injectionPublic writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling.
strategic-automation/violinAgentic pentest profile for Hermes: 31 playbooks for authorised recon, web/access-control attacks, safe exploit validation, and evidence-driven…
swisskyrepo/payloadsallthethingsA list of useful payloads and bypass for Web Application Security and Pentest/CTF
caddyserver/caddyFast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
d4vinci/scrapling🕷️ An adaptive Web Scraping framework that handles everything from a single request to a full-scale crawl!
danielmiessler/seclistsCurated collection of wordlists for security assessments, including usernames, passwords, URLs, fuzzing payloads, and sensitive data patterns for…