simplerhacking/evilginx3-phishletsThis repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use…
ajansha/cve-2025-55903Proof of concept for CVE-2025-55903, a stored HTML injection in PerfexCRM allowing authenticated users to inject malicious HTML into invoices and…
ajansha/cve-2025-60378Proof of concept for stored HTML injection in RISE CRM, demonstrating how authenticated users can inject malicious HTML into invoices and messages,…
security-avs/cve-2019-13633Proof of concept for a blind/persistent XSS vulnerability in Blinger.io helpdesk, demonstrating remote code execution in admin panels via crafted…
laliea/cve-2021-46398A Proof of Concept for the CVE-2021-46398 flaw exploitation
kgretzky/evilginx2Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…
rpgsec/roundcube-cve-2024-42008-pocProof-of-concept exploit for CVE-2024-42008, a Cross-Site Scripting vulnerability in RoundCube webmail. Delivers XSS payloads via contact forms to…
4n4s4zi/cve-2025-33053_pocPOC exploit for CVE-2025-33053 (external control of file execution path in URL file)
abdurahmon3236/cve-2024-6529Proof-of-concept scripts demonstrating reflected XSS in the Ultimate Classified Listings WordPress plugin and admin cookie theft via crafted payloads…
dionach/phemailPhEmail is a python open source phishing email tool that automates the process of sending phishing emails as part of a social engineering test
kleiton0x00/xsscopeXSScope is one of the most powerful and advanced GUI Framework for Modern Browser exploitation via XSS.
charlesgargasson/cve-2023-41425XSS-to-RCE exploit for Wonder CMS 3.2.0–3.4.2 with automated payload delivery, reverse shell, and cookie theft via malicious theme installation.
mannansainicyber/url_checkerHybrid ML and heuristic-based URL phishing detector with real-time analysis, explainable confidence scores, and REST API for programmatic security…
d7x/cve-2020-12432Proof-of-concept exploit for stored XSS and insecure permissions in Collabora CODE <= 4.2.2 via the Vereign WOPI API, enabling account hijacking and…
security-avs/cve-2020-16270Proof-of-concept for CVE-2020-16270, an XSS vulnerability in OLIMPOKS under 3.3.39, demonstrating remote injection of malicious JavaScript to steal…
mrd0x/webview2-cookie-stealerInjects JavaScript keylogger into WebView2 pages to capture keystrokes and exfiltrate cookies from Microsoft authentication sessions via HTTP GET…
eqstlab/cve-2024-25503Cross-Site Scripting vulnerability in Advanced REST Client v.17.0.9 exploit
mbadanoiu/cve-2021-46366CVE-2021-46366: Credential Bruteforce Attack via CSRF + Open Redirect in Magnolia CMS
