witchcraft
cosmic-zip/witchcraftWITCHCRAFT is a cyberdeck toolkit built for runners who dive deep into the mesh. It’s your all-in-one rig for data-ghosting, ICE-breaking, and…
bluetooth-securityforensicsnetwork-mapping+8
51
cosmic-zip/witchcraftWITCHCRAFT is a cyberdeck toolkit built for runners who dive deep into the mesh. It’s your all-in-one rig for data-ghosting, ICE-breaking, and…
kira2040k/redbloodc2Node.js command-and-control server with FUD payload generation, encrypted communication, session management, and modules for data exfiltration and…
olizimmermann/phishcollectorPhishCollector is a research framework for collecting, analysing, and tracking phishing sites.
dungsocool/cve-2026-64638Proof-of-concept exploit for CVE-2026-64638: reflected XSS in WordPress login chained with DOM clobbering to achieve admin account takeover and…
mohwahyudi/poc-cve-2026-64638-PoC exploit chain for WordPress pre-auth XSS to RCE via DOM clobbering, REST JSONP/SOME, and plugin upload, with Docker lab verification and…
george0papasotiriou/cve-2026-22005-oauth-2.0-device-code-phishing-short-interval-Proof-of-concept for CVE-2026-22005 showing OAuth 2.0 device code phishing via too-short polling interval, with vulnerable Flask server and exploit…
g33xter/cve-2021-28079Proof-of-concept exploit for XSS vulnerability in Jamovi <=1.6.18. Demonstrates crafting malicious .omv documents with JavaScript payloads to achieve…
v35hr4j/cve-2022-1597The plugin, used as a companion for the Discy and Himer themes, does not sanitise and escape a parameter on its reset password form which makes it…
rootup/git-clean-filterThis is a proof-of-work for abusing git's clean filter against IDEs & Sublime.
badrrx/wifi-spiderwebAn active cyber defense & honeypot system for OpenWrt routers running from a USB drive.
segunakinsoyinu/cve-2024-42009-roundcube-xssStored XSS exploit for Roundcube Webmail ≤1.6.6 (CVE-2024-42009) with zero-click email exfiltration via CSS animation event handlers. Includes SMTP…
catatonicprime/cve-2020-3580Additional exploits for XSS in Cisco ASA devices discovered by PTSwarm
r3m0t3nu11/cve-2025-1015an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant…
cesarbtakeda/7-zip-cve-2025-0411-pocProof-of-concept exploit for CVE-2025-0411, demonstrating Mark-of-the-Web bypass in 7-Zip to enable arbitrary code execution via crafted archives…
d0gukank/cve-2019-1218Proof-of-concept exploit for a cross-site scripting (XSS) vulnerability in Microsoft Outlook for iOS, enabling email-based spoofing attacks and…
jun2e0/cve-2025-26788Proof-of-concept exploit for CVE-2025-26788 demonstrating WebAuthn credential ID manipulation via JavaScript hooking to bypass authentication in…
asepsaepdin/cve-2010-1240Educational proof-of-concept demonstrating how to embed a Meterpreter backdoor into a PDF file exploiting CVE-2010-1240, with step-by-step Metasploit…