skills
specterops/skillsReusable offensive security skills and plugins for AI agents, covering reconnaissance, exploitation, C2, payload development, and reporting across…
command-and-controleducationexploitation+9
703
specterops/skillsReusable offensive security skills and plugins for AI agents, covering reconnaissance, exploitation, C2, payload development, and reporting across…
romain-deperne/cve-2026-33715Unauthenticated SSRF and open email relay in Chamilo LMS — CVE-2026-33715 / CVSS 7.2
toxy4ny/bl00dym4ryEducational trojan simulator for cybersecurity training, simulating phishing attacks with social engineering, system reconnaissance, anti-sandbox…
qyvora/qyvora-toha3eeGo-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…
typosquatter/ail-typo-websiteWebsite for ail-typo-squatting library
eqstlab/cve-2024-25503Cross-Site Scripting vulnerability in Advanced REST Client v.17.0.9 exploit
jbalanza/cve-2022-44215Public disclosure of TitanFTP 19.X Open Redirection vulnerability
mbadanoiu/cve-2021-46366CVE-2021-46366: Credential Bruteforce Attack via CSRF + Open Redirect in Magnolia CMS
jm-lemmi/cve-2019-17497POC Files for CVE-2019-17497
elceef/dnstwistDomain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
bettercap/bettercapThe Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
sherlock-project/sherlockHunt down social media accounts by username across social networks
gh-ost00/cve-2024-24809-proof-of-conceptCritical Flaws in Traccar GPS System Expose Users to Remote Attacks
gregory-chatelier/huntglyphDetect visually similar characters (homoglyphs) and hidden data in text to protect against deceptive attacks
charlesgargasson/cve-2023-41425XSS-to-RCE exploit for Wonder CMS 3.2.0–3.4.2 with automated payload delivery, reverse shell, and cookie theft via malicious theme installation.
d7x/cve-2020-12432Proof-of-concept exploit for stored XSS and insecure permissions in Collabora CODE <= 4.2.2 via the Vereign WOPI API, enabling account hijacking and…
security-avs/cve-2020-16270Proof-of-concept for CVE-2020-16270, an XSS vulnerability in OLIMPOKS under 3.3.39, demonstrating remote injection of malicious JavaScript to steal…
security-avs/cve-2019-13633Proof of concept for a blind/persistent XSS vulnerability in Blinger.io helpdesk, demonstrating remote code execution in admin panels via crafted…