Tools

busescanfly/rpi-hunter

Auto discover and exploit LAN raspberry pi's

malwareman007/scanner-and-patcher

A Web Vulnerability Scanner and Patcher

rub-nds/metadata-attacker

A tool to generate media files with malicious metadata

ns-sp4ce/vm4j

A tool for detect&exploit vmware product log4j(cve-2021-44228) vulnerability.Support VMware HCX/vCenter/NSX/Horizon/vRealize Operations Manager

vainlystrain/vailyn

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

wavvs/doctrack

Tool to manipulate and weaponize Office Open XML documents.

bigsizeme/log4j-check

log4J burp被扫插件、CVE-2021-44228、支持dnclog.cn和burp内置DNS、可配合JNDIExploit生成payload

ethicalhackingplayground/wordlistgen

Generates target specific word lists for Fuzzing with fuff

malwaretech/log4jtools

Tools for investigating Log4j CVE-2021-44228

kljunowsky/cve-2022-42889-text4shell

Proof-of-concept exploit for CVE-2022-42889 (Text4Shell) in Apache Commons Text, with manual and mass exploitation scripts using script, URL, and DNS…

kljunowsky/cve-2022-44268

Proof-of-concept exploit for CVE-2022-44268 enabling arbitrary file read via poisoned PNG images uploaded to vulnerable ImageMagick instances.…

makiraid/remot3d

Remot3d: is a simple tool created for large pentesters as well as just for the pleasure of defacers to exploit a system or server that runs a PHP…

redtimmy/enumjavalibs

Remote Java classpath enumeration via deserialization

marcejr117/cve-2025-24071_poc

A PoC of CVE-2025-24071 / CVE-2025-24054, A windows vulnerability that allow get NTMLv2 hashes

imbas007/cve-2026-64638-poc

CVE-2026-64638: WordPress Pre-auth XSS → RCE (XSS2Shell) PoC

ekomssavior/wp2shell

CVE-2026-63030 (RCE) + CVE-2026-60137 (SQLi)

principlebreach/waybend

Self-hosted SSRF redirect, payload, callback, and DNS workbench

jas502n/woodpecker-plugins

woodpecker-plugins