Tools

ayushx007/cve-2022-0847-dirtypipe-exploits

Collection of exploits and documentation for the Linux Dirty Pipe vulnerability (CVE-2022-0847), enabling arbitrary file overwrite and SUID binary…

asfandalimemon25/cve-2023-50164analysis-

CVE-2023-50164 An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a…

jenderal92/zip_bomb

ZIP Bomb Creator is a tool used to create a ZIP file that is small in size but drastically expands when extracted.

elevenpaths/mec

MEC

hardik05/damn_vulnerable_c_program

An example C program which contains vulnerable code for common types of vulnerabilities. It can be used to show fuzzing concepts.

0xnemian/cve-2021-23394

Docker container to setup a vulnerable elfinder version on both nginx and apache servers. Can be used to test vulnerability POC

0xdtc/ghost-5.58-arbitrary-file-read-cve-2023-40028

CVE-2023-40028 affects Ghost, an open source content management system, where versions prior to 5.59.1 allow authenticated users to upload files that…

gitlab-da/tutorials/security-and-governance/custom-scanner-integration/fern-pattern-scanner

Scans selected files for patterns stated in rules. This is used in order to find secrets you may have accidentally written to a file. This scanner is…

praison001/cve-2024-24919-check-point-remote-access-vpn

Exploit and scanner for CVE-2024-24919, an unauthenticated arbitrary file read in Check Point VPN appliances, enabling sensitive file disclosure and…

jakabakos/cve-2023-50164-apache-struts-rce

A critical security vulnerability, identified as CVE-2023-50164 (CVE: 9.8) was found in Apache Struts, allowing attackers to manipulate file upload…

mega8bit/exploit_cve-2021-29447

Go-based exploit for CVE-2021-29447 targeting WordPress 5.6.2 with PHP 8. Generates a malicious .wav payload to retrieve arbitrary files from the…

priyansh-anand/steganographer

Steganograpy in Python | Hide files or data in Image Files

josevnz/suricatalog

Parse, filter, and visualize Suricata eve.json logs with CLI tools for alerts, flows, DNS, and payloads. Includes a tutorial for learning Suricata…

skimask1690/wisedelete

Windows utility that uses the vulnerable WiseDelfile64.sys driver affected by CVE-2025-66680 to enable kernel-assisted file deletion.

kubearmor/log4j-cve-2021-44228

Apache Log4j Zero Day Vulnerability aka Log4Shell aka CVE-2021-44228

shinkirou789/cve-2025-8088-winrar-vulnerability

Python tool that crafts malicious RAR archives to exploit CVE-2025-8088 in WinRAR, enabling path traversal and arbitrary file overwrite via NTFS ADS.…

titanmaster96/cve-2025-9933

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file…