Tools

lolw0/opensta-exploit

Proof of Concept (PoC) of CVE-2025-69212 related with P7M File Processing

bc-security/empire

Encrypted C2 and post-exploitation framework for red teams, with modular PowerShell/Python/C#/Go agents, many offensive modules, and easy…

pwntester/serialkillerbypassgadgetcollection

Collection of bypass gadgets to extend and wrap ysoserial payloads

d00mfist/mystikal

macOS Initial Access Payload Generator

mogwaisec/mjet

Mogwai Java Management Extensions (JMX) Exploitation Toolkit

redtimmy/enumjavalibs

Remote Java classpath enumeration via deserialization

anomalousvectors/cve-2024-4367-poc

POC for PDF JS' CVE-2024-4367 vuln

redtimmy/richsploit

Exploitation toolkit for RichFaces

jenderal92/zip_bomb

ZIP Bomb Creator is a tool used to create a ZIP file that is small in size but drastically expands when extracted.

nanaao/csv-plus_vulnerability

👻 [PoC] CSV+ 0.8.0 - Arbitrary Code Execution (CVE-2022-21241)

sud0x00/log4j-cve-2021-44228

CVE-2021-44228

tasooshi/horrors-log4shell

A micro lab for CVE-2021-44228 (log4j)

ericardiansa/cve-2025-7847-poc

Wordpress Plugin AI Engine 2.9.3 - 2.9.4 Proof Of Concept

mrcl0wnlab/nuclei-template-exploit-f5-big-ip-icontrol-rest-auth-bypass-rce-command-parameter

CVE-2022-1388 is an authentication bypass vulnerability in the REST component of BIG-IP’s iControl API that was assigned a CVSSv3 score of…

lgenagul/cve-2023-4220-proof-of-concept

Chamilo LMS Unauthenticated Big Upload File that allows remote code execution