blindxss-lite
yuyudhn/blindxss-liteA lightweight Blind XSS (Cross-Site Scripting) collector and payload server built with Flask
command-and-controldata-exfiltrationinformation-gathering+7
1
yuyudhn/blindxss-liteA lightweight Blind XSS (Cross-Site Scripting) collector and payload server built with Flask
gmh5225/fullscreenbrowserphishingPoC of the phishing through setting browser in the fullscreen mode
gmh5225/definitelynotphishingContains evilginx phislets, gophish templates, burp suite extensions etc.
mr-un1k0d3r/redteamscriptsCollection of offensive red team scripts including process termination, SPF bypass for phishing, password spraying, and ColdFusion password…
samsayen/jqueryinguValid JQuery that profiles the system and returns info to the server in a fake analytics GET request
mbanyamer/cve-2026-27579-collabplatform-appwrite-cors-misconfigurationExploit PoC for CVE-2026-27579, a CORS misconfiguration in Appwrite backend, demonstrating credentialed account data theft via malicious phishing…
exfil0/weaponizing-cve-2024-4367CVE-2024-4367 is a critical vulnerability (CVSS 9.8) in PDF.js, allowing arbitrary JavaScript code execution due to insufficient type checks on the…
b1tbit/cve-2026-32201-exploitPython exploit for CVE-2026-32201, a reflected XSS in Microsoft SharePoint Server, enabling unauthenticated spoofing and data modification via…
mrbrutti/carteroModular phishing framework with CLI for cloning sites, sending templated emails, and launching phishing campaigns via email, SMS, iMessage, and…
muraenateam/muraenaAutomates phishing and post-phishing activities with an almost-transparent reverse proxy that dynamically mirrors target web apps and interacts with…
0x4meliorate/mimicFrameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic…
dungsocool/cve-2026-64638Proof-of-concept exploit for CVE-2026-64638: reflected XSS in WordPress login chained with DOM clobbering to achieve admin account takeover and…
mohwahyudi/poc-cve-2026-64638-PoC exploit chain for WordPress pre-auth XSS to RCE via DOM clobbering, REST JSONP/SOME, and plugin upload, with Docker lab verification and…
ceramicskate0/sharpexchangeC# Tool to interact with MS Exchange based on MS docs
montysecurity/infrahunterActively hunt for attacker infrastructure by filtering Shodan results with URLScan data.
rvrsh3ll/azure-app-toolsCollection of tools to use with Azure Applications
d00mfist/mystikalmacOS Initial Access Payload Generator
byt3bl33d3r/spamchannelSpoof emails from any of the +2 Million domains using MailChannels (DEFCON 31 Talk)