Web Security

wkovacs64/pwl

Password Lense: reveal character types in a password

bouquets-ai/cve-2022-22965-guitools

spring-core单个图形化利用工具，CVE-2022-22965及修复方案已出

fruh/extendedmacro

ExtendedMacro - BurpSuite plugin providing extended macro functionality

takeshixx/laf

Login Area Finder: scans host/s for login panels

joyghoshs/skf-cli

CLI Version of SKF Labs

itinerisltd/trellis-cve-2018-6389

Mitigate CVE-2018-6389 WordPress load-scripts / load-styles attacks

r0xdb/cve-2021-26855

CVE-2021-26855, also known as Proxylogon, is a server-side request forgery (SSRF) vulnerability in Exchange that allows an attacker to send arbitrary…

whiteov3rflow/cve-2025-2304-poc

Proof-of-concept exploit for CVE-2025-2304, a mass assignment vulnerability in Camaleon CMS < 2.9.1 allowing authenticated privilege escalation to…

ravinacademy/cve-2020-0688

Exploitation Script for CVE-2020-0688 "Microsoft Exchange default MachineKeySection deserialize vulnerability"

adamrpostjr/cve-2021-27065

Quick One Line Powershell scripts to detect for webshells, possible zips, and logs.

bytereaper77/cve-2025-32429

Exploit for CVE-2025-32429 – SQLi in XWiki REST API (getdeleteddocuments.vm).

zephrfish/cve-2021-28480_honeypoc3

DO NOT RUN THIS.

mrakovic-org/cfunmitigate

Layer 7 UAM Bypass

generaltesler/cve-2016-10033

RCE against WordPress 4.6; Python port of https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html