Tools

sobri3195/pegasus-pentest-arsenal

A comprehensive web application security testing toolkit that combines 10 powerful penetration testing features into one tool.

machine1337/hackguard

FAST WEB APPLICATION VULNERABILITY SCANNER written in python3

corazawaf/coraza

Go-based Web Application Firewall library compatible with ModSecurity SecLang rules and OWASP Core Rule Set v4, providing real-time HTTP traffic…

havoc10-sw/detect_polyfill_cve-2024-38537-

Here's a Python script that checks if the polyfill.io domain is present in the Content Security Policy (CSP) header of a given web application.

yousseflahouifi/dbdtct

Python-based scanner that detects debug mode misconfigurations in web applications using multiple HTTP methods and fingerprinting techniques to…

balajih4kr/cve-2025-29927

CVE-2025-29927 is a critical vulnerability in Next.js, a popular React-based web framework. The flaw exists in how the middleware feature handles…

immunit/cve-2018-11759

Proof of concept showing how to exploit the CVE-2018-11759

trackflaw/cve-2023-25202

CVE-2023-25202: Insecure file upload mechanism

12nio/cve-2025-68428_poc

CVE-2025-68428 Proof of Concept

nickguitar/drag-and-drop-multiple-file-uploader-pro-path-traversal

Drag and Drop Multiple File Uploader PRO - Contact Form 7 v5.0.6.1 Path Traversal (CVE-2023-1112)

ademking/cve-2025-29927

Next.js Middleware Authorization Bypass

vulnmachines/confluence-cve-2023-22515

Confluence Broken Access Control

polosss/by-poloss..-..cve-2026-12432-poc

WP Full Stripe Free <= 8.4.3 - Missing Authorization

gregk4sec/cve-2025-31651-o

CVE-2025-31651 PoC

whitej3rry/cve-2022-40490

Tiny File Manager v2.4.7 and below are vulnerable to Cross Site Scripting

osmancanvural/cve-2025-68721

Axigen WebAdmin Improper Access Control Vulnerability