
CVE-2025-29017
Proof-of-concept exploit for CVE-2025-29017, demonstrating remote code execution via malicious file upload in Code Astro Internet Banking System…

Proof-of-concept exploit for CVE-2025-29017, demonstrating remote code execution via malicious file upload in Code Astro Internet Banking System…

A Rust implementation of the POC for CVE-2017-7269, targeting the WebDAV service in Microsoft Internet Information Services (IIS) 6.0.

Python-based exploit for CVE-2018-8174 targeting Internet Explorer via crafted RTF file, enabling remote code execution with netcat reverse shell…

Proof-of-concept for a stored XSS vulnerability in Code Astro Internet Banking System 2.0.0, demonstrating exploitation via the name parameter in…

Rejetto HFS (HTTP File Server) is a simple web file server that facilitates file sharing over a network or the internet.

Proof-of-concept for a stored XSS vulnerability in Code Astro Internet Banking System 2.0.0, demonstrating session hijacking and client-side attacks…

Proof-of-concept exploit for CVE-2025-32407: TLS certificate validation bypass in Samsung Internet for Galaxy Watch, enabling Man-in-the-Middle…

According to researchers with Rapid7, over 110,000 devices appear on internet, which run stable Samba versions, while 92,500 seem to run unstable…

Proof-of-concept for a Cross-Site Request Forgery (CSRF) vulnerability in code astro Internet Banking System 2.0.0, enabling unauthorized account…

The IoT security toolkit to help identify IoT related dashboards and scan them for default passwords and vulnerabilities.

Python exploit for Remote Code Executuion on GPON home routers (CVE-2018-10562). Initially disclosed by VPNMentor…

Intentionally vulnerable web application covering OWASP Top 10 vulnerabilities for security training, CTF competitions, and penetration testing…

A comprehensive, step-by-step guide to mastering cybersecurity from beginner to expert level with curated resources, tools, and career guidance

OSINT & recon toolkit // 100+ tools, one-command installer, SOCMINT, GEOINT, network recon, dark web, forensics & more.

Python-based DDoS attack tool for flooding targets with traffic via IP and port specification. Designed for educational stress-testing and network…

An online request replication and TCP stream replay tool, ideal for real testing, performance testing, stability testing, stress testing, load…

A curated list of resources related to Industrial Control System (ICS) security.

Attify OS - Distro for pentesting IoT devices