#1Tools for testing, exploiting, and securing web applications and APIs.
Kitploit recommended

Atlassian JIRA Template injection vulnerability RCE
Interact with Frida devices, processes, and scripts directly from your browser.

This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.

how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP

Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.

Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)

🐱💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123…

PoC for CVE-2020-6287 The PoC in python for add user only, no administrator permission set. Inspired by @zeroSteiner from metasploit. Original…

A Docker based LDAP RCE exploit demo for CVE-2021-44228 Log4Shell

This Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.

out-of-bounds write in Fortinet FortiOS CVE-2024-21762 vulnerability

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11)

PHP 7 and safe-build Update of the popular C99 variant of PHP Shell.

MCP server for Google search and page fetching using headless Chromium

Anti-Anti-Automation Framework

A Web Vulnerability Scanner and Patcher

WSUS Unauthenticated RCE