Tools

heavyghost-le/poc_sql_injection_in_parse_server_prior_6.5.7_-_7.1.0

Advanced PostgreSQL database enumeration tool exploiting CVE-2024-39309 in Parse Server - Comprehensive SQL injection exploitation for security…

gagaltotal/cve-2026-26980-ghost-cms-api

Go-based PoC for Ghost CMS Content API SQL injection (CVE-2026-26980). Verifies vulnerability, extracts admin credentials and API secrets, and…

0xdtc/ghost-5.58-arbitrary-file-read-cve-2023-40028

Automated exploit for Ghost CMS CVE-2023-40028 that authenticates to the admin API, uploads a symlinked ZIP, and reads arbitrary host files from the…

depthsecurity/relayking-depth

Active Directory relay attack detection and enumeration tool. Scans for NTLM relay opportunities, detects CVE-2025-33073, CVE-2025-54918,…

syogod/cve-2023-40028

Proof-of-concept script demonstrating CVE-2023-40028 Local File Inclusion in Ghost CMS via symlink file upload, enabling authenticated attackers to…

monke443/cve-2023-40028

Arbitrary file read in Ghost-CMS allows an attacker to upload a malicious ZIP file with a symlink.

rvzsec/cve-2023-40028

Python-based proof-of-concept exploit for CVE-2023-40028, a symlink upload vulnerability in Ghost CMS enabling authenticated arbitrary file read via…

n0bitaemon/cve-2026-26980-poc

Blind SQL injection exploit for Ghost CMS (CVE-2026-26980) targeting unauthenticated Content API to extract credentials, API keys, and database…

godylockz/cve-2023-40028

Proof-of-concept exploit for CVE-2023-40028 enabling authenticated arbitrary file read in Ghost CMS via symlink upload. Includes interactive shell…

buutt3rf1y/cve-2023-40028

Proof-of-concept exploit for CVE-2023-40028, an arbitrary file read vulnerability in Ghost CMS, allowing authenticated users to read host files via…

vognik/cve-2026-26980

Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…

axroux/ghost-path-traversal-cve-2023-32235-

A Directory Traversal attack (also known as path traversal) aims to access files and directories that are stored outside the intended folder.

entysec/ghost

Android post-exploitation framework leveraging ADB for remote device access, shell control, and automated exploitation during penetration testing…

0xyassine/cve-2023-40028

Proof of concept demonstrating authenticated symlink upload in Ghost CMS leading to arbitrary file read via CVE-2023-40028.

makelinux/cve-2015-0235-workaround

A shared library wrapper with additional checks for vulnerable functions gethostbyname2_r gethostbyname_r (GHOST vulnerability)

eqstlab/cve-2026-26980

Unauthenticated SQL injection proof-of-concept for Ghost CMS Content API (CVE-2026-26980) with Docker lab and boolean-based database extraction.

fser/ghost-checker

Test wether you're exposed to ghost (CVE-2015-0235). All kudos go to Qualys Security

arm13/ghost_exploit

CVE-2015-0235 EXIM ESTMP GHOST Glibc Gethostbyname() DoS Exploit/PoC