Blinder
mhaskar/blinderA python library to automate time-based blind SQL injection
database-securitypenetration-testingvulnerability-analysis+1
50
mhaskar/blinderA python library to automate time-based blind SQL injection
hantwister/o5logon-fetchAttempts to exploit CVE-2012-3137 on vulnerable Oracle servers
emad-almousa/cve-2020-2969Proof-of-concept exploit for CVE-2020-2969 targeting unauthorized access to Oracle Database password hashes. Enables security researchers to test and…
casp3r0x0/cve-2025-58443FOGProject Authentication bypass CVE-2025-58443 Exploit
emad-almousa/cve-2023-22074Proof-of-concept exploit for CVE-2023-22074, an Oracle Database Sharding component vulnerability enabling password hash exposure in versions 19c,…
quentinhardy/odatPenetration testing tool for Oracle Databases that discovers valid SIDs, brute-forces credentials, escalates privileges to DBA, executes system…
securebinary/firebaseexploiterCLI tool to scan for and exploit insecure Firebase databases, supporting mass vulnerability scanning, custom JSON payload injection, and URI path…
synacktiv/cve-2024-43468Exploit for CVE-2024-43468: unauthenticated SQL injection in Microsoft Configuration Manager Management Points, enabling arbitrary SQL execution and…
dinosn/mariadb-13-rce-labMariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and…
dwisiswant0/cve-2025-49844Proof-of-concept exploit for Redis 8.2.1 Lua parser use-after-free, racing garbage collection via crafted loadstring calls to achieve remote code…
dinosn/cve-2026-2005Exploit for CVE-2026-2005, a heap overflow in PostgreSQL's pgcrypto extension leading to remote code execution. Includes PoC generators, Docker lab,…
fsecurelabs/cisco-ucm-sqli-scriptsScripts that can be used to exploit CVE-2019-15972 which was an Authenticated SQLi issue in Cisco Unified Call Manager (UCM).
rbowes-r7/refreshing-mcp-toolAn implementation of F5's `mcp` protocol, including MitM tooling to sniff traffic while vuln hunting
metthk/cve-2023-48084-revisedPython PoC exploiting time-based blind SQLi in Nagios XI to extract database contents, with multithreaded binary-search extraction and CLI…
open-flaw/cve-2026-2005PostgreSQL pgcrypto heap buffer overflow PoC demonstrating CVE-2026-2005: low-privileged RCE and privilege escalation to superuser via crafted…
george0papasotiriou/cve-2026-22003-redis-lua-sandbox-escape-via-debug.sethook-Proof-of-concept exploit for CVE-2026-22003 demonstrating Redis Lua sandbox escape via debug.sethook to execute arbitrary system commands.
vuxnx/cve-2026-72898Proof-of-concept exploit for CVE-2026-72898, targeting Toucan2 behavior with malformed map options to reproduce the vulnerability and validate…
amitlttwo/cve-2022-31626Proof-of-concept exploit for CVE-2022-31626, a buffer overflow in PHP's pdo_mysql with mysqlnd driver that can lead to remote code execution.