socgholish_finder
lasq88/socgholish_finderScans websites for SocGholish JavaScript injections, deobfuscates malicious payloads, and reports shadowing domain URLs used in malvertising…
defensive-toolsinformation-gatheringmalware-analysis+2
14
lasq88/socgholish_finderScans websites for SocGholish JavaScript injections, deobfuscates malicious payloads, and reports shadowing domain URLs used in malvertising…
owasp/secretsifterOWASP Incubator project: detects credentials exposed in browser-delivered content (JavaScript, config responses, live traffic).
bombobombone/cve-2026-103445Report summary and local proof-of-concept for CVE-2026-103445, a stored XSS in MediaWiki PageForms #autoedit via javascript: redirect URLs.
jet-pentest/cve-2023-31779Proof-of-concept exploit for stored XSS (CVE-2023-31779) in Wekan kanban board. Demonstrates JavaScript injection via reaction to comment, enabling…
jfriedli/cve-2025-12137Proof-of-concept exploit for CVE-2025-12137 demonstrating local file disclosure via a WordPress plugin's REST API importer endpoint. Includes…
sohelyousef/js-secret-hunterAutomated Python scanner to detect hardcoded secrets (Private Keys, API Tokens) in client-side JavaScript files.
hect0rs/reflected-xss-on-opentext-portal-v7.4.4Proof-of-concept for reflected XSS (CVE-2018-20165) in OpenText Portal v7.4.4, demonstrating JavaScript injection via the vgnextoid URI parameter…
aqwainfosec/cve-2025-56807Proof-of-concept for a stored XSS vulnerability in FairSketch RISE Ultimate Project Manager & CRM v3.9.4, demonstrating arbitrary JavaScript…
l8bl/cve-2025-44998Proof-of-concept exploit for a stored XSS vulnerability in TinyFileManager v2.4.7, enabling arbitrary JavaScript execution and session cookie…
azraelsblade/cve-2023-46948Proof-of-concept for a reflected XSS vulnerability in Temenos T24 Browser R19.40, affecting the 'skin' parameter in about.jsp and genrequest.jsp,…
security-avs/cve-2020-16270Proof-of-concept for CVE-2020-16270, an XSS vulnerability in OLIMPOKS under 3.3.39, demonstrating remote injection of malicious JavaScript to steal…
alt3kx/cve-2002-0346Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL…
huyvo2910/cve-2025-25747-hoteldruid-3-0-7-reflected-xssReflected XSS vulnerability proof-of-concept for HotelDruid 3.0.7, demonstrating arbitrary JavaScript execution via the ripristina_backup parameter…
exploitwritter/cve-2022-25063This script exploits a vulnerability (XSS) in the TPLink WR840N router, using a field for injecting javascript code.
siwecos/infoleak-scannerWeb scanner that detects CMS versions, plugins, vulnerable JavaScript libraries, email addresses, and phone numbers on target websites, scoring…
hakluke/hakrawlerSimple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web application
nccgroup/singularityA DNS rebinding attack framework.
iamstoxe/urlgrabA golang utility to spider through a website searching for additional links.