
hackingtool
All-in-one penetration testing toolkit aggregating 185+ tools across 20 categories including information gathering, web & wireless attacks, phishing,…

All-in-one penetration testing toolkit aggregating 185+ tools across 20 categories including information gathering, web & wireless attacks, phishing,…

A comprehensive all-in-one Python-based Proof of Concept script to discover and exploit a critical authentication bypass vulnerability…

Gives you one-liners that aids in penetration testing operations, privilege escalation and more

A comprehensive security toolkit with 1000+ penetration testing and security assessment tools.

Some Pentest Tools. Install and keep up to date some pentesting tools. I used this to pass my OSCP exam.

Sashay is an automatic installer for useful tools.

A handy collection of my public papers, all in one place.

All-in-one exploit tool for CVE-2026-27966, a critical RCE in Langflow. Features mass scanning, auto-detection, payload execution, interactive shell,…

Proof-of-concept exploit for CVE-2021-24307, an authenticated admin RCE in All in One SEO Pack <= 4.1.0.1 via PHP unserialization, enabling arbitrary…

CVE-2021-4045 CVE-2021-4045 is a Command Injection vulnerability that allows Remote Code Execution in the TP-Link Tapo c200 IP camera. It affects all…

Proof of concept code for client-side vulnerabilities

FreePBX Pre-Auth SQLi to RCE (CVE-2025-57819) — All-in-One Exploit

Wordpress SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation

ALL In One Custom Login Page <= 7.1.1 - Missing Authorization to Authenticated (Subscriber+)Privilege Escalation

Wordpress SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation

All Credit to MaherAzzouzi (https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit). This is a copy of the exploit for CTFs

Two security issues identified in Sn1per v9.0 free version by XeroSecurity

Propovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read