
BlackStone
Automated pentesting report generator with vulnerability database, severity classification, and client information gathering via subdomain and email…

Automated pentesting report generator with vulnerability database, severity classification, and client information gathering via subdomain and email…

DDOS Tool: To take down small websites with HTTP FLOOD. Port scanner: To know the open ports of a site. FTP Password Cracker: To hack file system of…

Automates OSINT data collection and analysis for threat intelligence, attack surface mapping, and reconnaissance. Integrates 200+ modules for DNS,…

raven is a Linkedin information gathering tool that can be used by pentesters to gather information about an organization employees using Linkedin.

An open-source Secure Email Gateway (SEG) evaluation toolkit designed for red-teamers.

CVE-2022-40347: Intern Record System - 'phone', 'email', 'deptType' and 'name' SQL Injection (Unauthenticated)

Exploit for CVE-2016-10033, a remote code execution vulnerability in PHPMailer, enabling unauthenticated attackers to execute arbitrary code via…

Updated POC for Unauth Post Author Email Disclosures WordPress CVE-2023-5561

Automated exploit for CVE-2019-9053, a time-based blind SQL injection in CMS Made Simple ≤2.2.9. Extracts admin credentials (username, email,…

Exploit for CVE-2020-14065: unlimited file upload vulnerability in Icewarp Email Server 12.3.0.1, enabling remote code execution via crafted upload…

WP Email Users <= 1.7.6 - SQL Injection

PrestaShop AdminLogin Email Enumeration PoC - CVE-2025-51586. This repository provides an ethical Proof-of-Concept (PoC) for the PrestaShop…

Proof-of-concept exploit for CVE-2020-14064, an incorrect access control vulnerability in Icewarp Email Server 12.3.0.1, enabling unauthorized access.

Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the…

CVE-2024-4295 Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via hash

Exploit for CVE-2019-18818 allowing password reset of admin accounts via email. Useful for penetration testing and vulnerability verification of…

Time-based blind SQL injection exploit for CMS Made Simple <= 2.2.9 (CVE-2019-9053) that extracts username, email, password hash, and salt, with…

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing…