morpheuslord/gpt_vuln-analyzerUses ChatGPT API, Bard API, and Llama2, Python-Nmap, DNS Recon, PCAP and JWT recon modules and uses the GPT3 model to create vulnerability reports…
jordan922/cve2025-20265Safe Python script to detect Cisco FMC instances potentially vulnerable to CVE-2025-20265. Uses official FMC API to check version, supports…
faceless0x7/cve-2026-89012Python exploit for CVE-2026-89012, a Dolibarr SQL filter denylist bypass that uses a blind-boolean oracle to extract password hashes and API keys via…
gazettel/cve-2020-17519Python-based directory traversal exploit for CVE-2020-17519 (Apache Flink) with multi-threading, proxy support, and configurable depth for retrieving…
neko-hat/cve-2024-50395Python exploit for CVE-2024-50395, an authorization bypass in QNAP Media Streaming add-on. Uses crafted User-Agent headers to bypass authentication…
h4x0r-dz/cve-2024-23897Python exploit for Jenkins CVE-2024-23897: arbitrary file read via CLI args4j parsing, enabling RCE. Scans hosts and extracts sensitive files from…
ethan-repo-lab4b6/cve-2022-36537Python exploit for CVE-2022-36537, an authentication bypass in ZK Framework affecting R1Soft Server Backup Manager, allowing retrieval of web context…
thewhiteh4t/cve-2020-10977GitLab 12.9.0 Arbitrary File Read
emtunc/slackpirateSlack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
grampae/mqxssHooked browser communication over MQTT
george0papasotiriou/cve-2026-21015-php-filter-chain-arbitrary-file-readPoC exploit for CVE-2026-21015 that abuses PHP filter chains to read arbitrary files through a vulnerable include() call, disclosing source and…
intelligent-ears/cve-2025-68613Nuclei-based detection template for CVE-2025-68613, a critical RCE in n8n workflow automation. Uses multi-layered passive fingerprinting to identify…
alt3kx/cve-2022-22965Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive)
abhishekmorla/cve-2022-26134Exploit scanner for CVE-2022-26134 in Atlassian Confluence. Uses Shodan to find vulnerable hosts, then executes commands via the OGNL injection…
obayesshelton/cve-2014-0160-scannerPHP CLI script to scan domains for the CVE-2014-0160 (Heartbleed) vulnerability using an external API service.
nicocha30/ligolo-ngAn advanced, yet simple, tunneling/pivoting tool that uses a TUN interface.
knavesec/credmasterRefactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling
cerberusmrxi/flowise-cve-2026-58057-exploitFlowise Windows RCE exploit for CVE-2026-58057. Bypasses environment variable validation via case-sensitive flaw. Uses node_options to inject…
