Tools

daemoncibsec/flar3ad

POC of CVE-2026-51031 for arbitrary local file read

ch4120n/cve-2026-15409

Proof-of-Concept exploit for CVE-2026-15409 (SonicWall SMA 1000 RCE) via Erlang distribution over WebSocket. Achieves unauthenticated remote code…

toanln-cov/cve-2026-66493

The Joomla extension PhocaCommander is vulnerable to Path Traversal in delete, copy, move actions

invicti-security/web-inf-path-trav

Tool for helping in the exploitation of path traversal vulnerabilities in Java web applications

moniik/poc_salesforce_lightning

Academic purposes only. Attack against Salesforce lightning with guest privilege.

byt3bl33d3r/dnschef-ng

DNSChef (NG) - DNS proxy for Penetration Testers and Malware Analysts

sunynov/cve-2026-39363

方便实用的CVE-2026-39363利用工具

i-am-shodan/usbarmyknife

USB Army Knife – the ultimate close access tool for penetration testers and red teamers.

shinthink/cve-2026-60004

CVE-2026-60004 — Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone → post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1

pentestpartners/ptp-rat

Exfiltrate data over screen interfaces

alpernae/cve-2024-40422

Python implementation/PoC for CVE-2024-40422. Exploits a critical directory traversal vulnerability in Devika v1's /api/get-browser-snapshot endpoint…

eng1ndes/northstarc2

Web Based Command Control Framework (C2) #C2 #PostExploitation #CommandControl #RedTeam #C2Framework #PHPC2 #.NETMalware #Malware #PHPMalware #CnC…

mbadanoiu/mal-014

MAL-014: Authenticated Arbitrary File Read in VMware vCenter Server

nccgroup/crosssitecontenthijacking

Content hijacking proof-of-concept using Flash, PDF and Silverlight

5kr1pt/glpi-logbleed

PoC for CVE-2026-53629, blind SQL injection in the GLPI history log filter