
AndroRAT
A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side

A Simple android remote administration tool using sockets. It uses java on the client side and python on the server side

Free Burp Collaborator alternative- OOB interaction capture (HTTP/HTTPS/DNS) with SQLite & exfil reassembly

Python ADB-based Android device management and security audit toolkit with an interactive menu for root detection, permission dumps, debuggable app…

Black-box XXE scanner detecting in-band, error-based, and blind out-of-band injection via statistical baselining, parser fingerprinting, and OOB…

PoC and red team app for CVE-2026-28576, a zero-permission SQL injection in the Android Contacts Provider enabling full contacts database…

Go exploit for CVE-2026-85706, an unauthenticated arbitrary file read in GitLab CE/EE Workhorse via URL-encoding bypass, with concurrent requests and…

Python exploit for CVE-2026-42167 (ProFTPD mod_sql). Features automated file scanning and timing-based blind data exfiltration.

POC for CVE-2026-7720 - Ollama tensor digest path traversal

Automated exploit tool for CVE-2026-1357, an unauthenticated RCE in WPvivid Backup & Migration. Scans WordPress targets, bypasses WAF/403, uploads a…

Printer exploitation framework for security testing via raw port 9100, featuring PCL payload delivery, DoS bombing, C2 QR codes, phishing QR codes,…

Apple MacOS Screen Sharing Arbitrary File read/write -> RCE

Tunnel IPv4 data through DNS servers to bypass firewall restrictions and provide covert network access for penetration testing.

POC of CVE-2026-51031 for arbitrary local file read

Proof-of-Concept exploit for CVE-2026-15409 (SonicWall SMA 1000 RCE) via Erlang distribution over WebSocket. Achieves unauthenticated remote code…

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Penetration Testers.

The Joomla extension PhocaCommander is vulnerable to Path Traversal in delete, copy, move actions - CVSS 6.4

Tool for helping in the exploitation of path traversal vulnerabilities in Java web applications

Academic purposes only. Attack against Salesforce lightning with guest privilege.