Tools for testing, exploiting, and securing web applications and APIs.
swzhouu/cve-2022-48311HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B HTTP configuration page Cross Site Scripting (XSS)…
swzhouu/cve-2020-27368TOTOLINK-A702R-V1.0.0-B20161227.1023 Directory Indexing Vulnerability
swzhouu/cve-2020-26733SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 Cross Site Scripting (XSS) Vulnerability
swzhouu/cve-2020-26732SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTPS session
joaomagfreitas/bash-cve-2017-17562PoC for CVE-2017-17562 written in bash
itworksig/cve-2022-1609-exploitExploit for CVE-2022-1609 WordPress Weblizar Backdoor.
bytereaper77/cve-2025-6907a standalone C-based SQL Injection exploit targeting the CVE‑2025‑6907 vulnerability in the CODE_PROJECT service.
bytereaper77/cve-2025-9090Command Injection in Tenda AC20 16.03.08.12 (/goform/telnet)
bytereaper77/cve-2025-8971Sql injection in itsourcecode Online Tour and Travel Management System 1.0.
bytereaper77/cve-2025-7769PoC to inject a command via the DEVICE_PING endpoint
bytereaper77/cve-2025-7766PoC exploit for CVE-2025-7766 – XXE vulnerability leading to potential RCE.
bytereaper77/cve-2025-6082Proof‑of‑Concept exploits the Full Path Disclosure bug in the “Birth Chart Compatibility” WordPress plugin (<=v2.0)
bytereaper77/cve-2025-59342Exploit Path Traversal in esm-dev
and0x00/cve-2021-32789💣 Wordpress WooCommerce users dump exploit.
tazmidev/cve-2026-53571CVE-2026-53571 `server.fs.deny` bypass on Windows alternate paths PoC.
st0pl/dvrfaultnet.NET console application that exploits CVE-2018-9995 vulnerability
carlos-mesquita/tpaslog4shellpocProof of Concept for the Log4Shell vulnerability (CVE-2021-44228), developed as part of the coursework for the curricular unit TPAS in the Master's…
purpleteam-labs/purpleteam-orchestratorOrchestration component of purpleteam
