kaandemir993/nwh-stealer-analysis-fileless-bun-runtime-execution-clipboard-image-theft-cloud-c2-aws-r2-Static analysis and payload extraction of NWH Stealer. Features deep dive into fileless execution via Bun JavaScript Runtime, in-memory clipboard…
codingranjith/hackingtoolkitALL IN ONE Hacking Tool For Hackers, Penetration Tester and Cybersecurity. New Version Beginner to Advanced Tool. This Tool is made for educational…
affolter-engineering/xssearchRust-based XSS scanner with context-aware payload selection, WAF detection and bypass, crawling, blind XSS callbacks, and static DOM sink analysis.
affolter-engineering/mqattackRust CLI for MQTT penetration testing: subscribe/publish, broker fingerprinting, ACL probing, topic enumeration, credential brute-force, and Last…
kaandemir993/formbook-payload-extraction-xor-decryption-net-assembly-analysisReverse engineering analysis of Formbook, an info-stealer that uses .NET assembly manipulation and XOR decryption. Full payload extracted via x32dbg,…
yuyudhn/blindxss-liteA lightweight Blind XSS (Cross-Site Scripting) collector and payload server built with Flask
principlebreach/waybendSelf-hosted SSRF redirect, payload, callback, and DNS workbench
kaandemir993/stealc-stealer-runtimebroker-hollowing-c2-extraction-payload-extraction-analysisReverse engineering analysis of StealC Stealer, an info-stealer that uses RuntimeBroker.exe hollowing, C2 infrastructure, and payload extraction.…
botesjuan/burp-suite-certified-practitioner-exam-studyPractical study notes and walkthroughs for PortSwigger Academy labs, covering web vulnerabilities, payloads, enumeration, and BSCP exam strategies.
eh-amish/cve-2026-64638-xss-to-shell-pocValidates pre-authentication reflected XSS in WordPress, fingerprints vulnerable versions, checks payload reflection and JSONP, and generates…
grampae/mqxssHooked browser communication over MQTT
kaandemir993/salat-stealer-telegram-proxy-decoy-c2-analysis"Reverse engineering analysis of Salat Stealer, a Go-based info-stealer that uses a Telegram proxy decoy, C2 communication, and encrypted memory…
leekenghwa/cve-2023-46003Proof-of-concept for a stored XSS vulnerability in i-doit Pro 25 and below, demonstrating payload injection via multiple parameters and components…
moloch--/cve-2016-1764Extraction of iMessage Data via XSS
sromanhu/cve-2023-43341-evolution-reflected-xss---installation-connection-Evolution CMS 3.2.3 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload…
whalebone7/eagleeyeTo filter the actual vulnerable URLs from the screenshots, you can use the ee.sh script. Simply run ./ee.sh -f "path/to/index_screenshot.txt" -k…
johenlastgen-jlg/wp2shellwp2shell - WordPress RCE & PoC (CVE-2026-63030 + CVE-2026-60137)
northwavesecurity/log4jcheckA script that checks for vulnerable Log4j (CVE-2021-44228) systems using injection of the payload in common HTTP headers.
