
HASH
YAML-configurable low-interactive honeypot framework for deploying HTTP/HTTPS-based deception servers with built-in honeytraps and Datadog log…
Tools for testing, exploiting, and securing web applications and APIs.

YAML-configurable low-interactive honeypot framework for deploying HTTP/HTTPS-based deception servers with built-in honeytraps and Datadog log…

CVE-2017-9506 - SSRF

Chrome v8 1Day Exploit by István Kurucsai

XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template

Exploit for CVE-2023-46747, a remote code execution vulnerability in F5 BIG-IP, allowing unauthorized user creation and command execution.

SQL Server Reporting Services(CVE-2020-0618)中的RCE

Python exploit for Jenkins CVE-2024-23897: arbitrary file read via CLI args4j parsing, enabling RCE. Scans hosts and extracts sensitive files from…

CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656

Improved DOS exploit for wordpress websites (CVE-2018-6389)

Wavestone's web interface for password cracking with hashcat

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari

CTF web challenge simulating a real-world screenshotting vulnerability, with Docker setup and video writeup for hands-on security education.

Python library and CLI for the Bug Bounty Recon API

A fast, keyboard-driven HTTP intercepting proxy and hacking & pentesting toolkit for the terminal.

CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2

Foxit PDF Reader Remote Code Execution Exploit

Laravel <= v8.4.2 debug mode: Remote code execution (CVE-2021-3129)

OWASP Serverless Top 10