
SSTImap
Automatic SSTI detection tool with interactive interface

Automatic SSTI detection tool with interactive interface

Python script to inject existing Android applications with a Meterpreter payload.


RCE exploit for dompdf

I'll submit the poc after blackhat

Agentic C2-style MCP server for Frida instrumentation on rooted Android and jailbroken iOS.

CVE-2022-41852 Proof of Concept (unofficial)

[CVE-2019-18935] Telerik UI for ASP.NET AJAX (RadAsyncUpload Handler) .NET JSON Deserialization

Hotel Druid 3.0.3 Code Injection to Remote Code Execution

🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.

CVE-2021-40353 openSIS 8.0 SQL Injection Vulnerability

CVE-2024-23729

All Working Exploits

Public advisory & PoC for CVE-2026-26897 — Deep Link Bypass in EcoOnline EHS Android (com.airsweb.v10), fixed in 0.2.500

Controlled virtual attack & defense lab — CVE-2011-2523 exploitation, Nmap recon, Nikto scanning, UFW hardening on Metasploitable 2

Remote Code Execution Exploit
