
img-payloads
Curated collection of image-based payloads for authorized red-team testing and security education, with HTML examples for generating or embedding web…

Curated collection of image-based payloads for authorized red-team testing and security education, with HTML examples for generating or embedding web…

Curated collection of proof-of-concept exploits for 16 CVEs targeting web applications (ASUS, D-Link, Netgear, TP-Link, Xiaomi) and Wi-Fi WPA3-SAE,…

Curated collection of injection payloads for web application security testing, covering SSTI, XXE, XSS, SSRF, SQLi, NoSQLi, LDAP, command injection,…

Welcome to the Metasploit Exploits Repository, your go-to resource for a comprehensive collection of cutting-edge exploits designed for penetration…

Curated collection of XSS payload vectors for web application security testing, covering various contexts and bypass techniques.

Collection of detailed and optimized(?) write-ups for various CTF challenges

A comprehensive collection of penetration testing cheatsheets, guides, and tools.

A collection of real world AI/ML exploits for responsibly disclosed vulnerabilities

Collection of proof-of-concept exploits and technical analyses for high-impact CVEs, covering browser memory corruption, TCP/IP RCE, and web…

This repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use…

Python3-converted exploit and research notes for CMS Made Simple (CVE-2019-9053) — Unauthenticated SQL Injection vulnerability. Includes original…

Curated collection of bug bounty tips, one-liners, and automation workflows for recon, fuzzing, and web exploitation, with private nuclei templates…

Curated vulnerability research repository with in-depth writeups, PoC scripts, and IOC detection tools for real-world security incidents like…

Curated collection of cross-site scripting payloads, polyglots, and injection test rules for web application penetration testing and bug bounty…

A collection of CVE exploits, including Python PoCs and README files with instructions for reproducing and exploiting each vulnerability.

Curated collection of validated Joomla exploit artifacts with Docker lab environments. Includes RCE, SQLi, XSS, and privilege escalation scripts…

Exploit scripts for CVE-2024-28397, a js2py sandbox escape that executes arbitrary Python code to spawn a reverse shell on a target endpoint.

A collection of awesome penetration testing resources and tools