
CVE-2018-25031
.json and .yaml files used to exploit CVE-2018-25031

.json and .yaml files used to exploit CVE-2018-25031

Open-source URL masking & analysis tool for security research, phishing awareness, and defensive testing. Demonstrates adversary techniques used to…

CamJacking is a tool designed for use in human penetration testing tool. It is intended to simulate potential security threats by testing the…

This script can be used to gain access to a victim's Samsung Account if they have a specific version of Samsung Members installed on their Samsung…

macro_pack is a tool by @EmericNasi used to automatize obfuscation and generation of Office documents, VB scripts, shortcuts, and other formats for…

Credsleaker allows an attacker to craft a highly convincing credentials prompt using Windows Security, validate it against the DC and in turn leak it…

C# Tool to interact with MS Exchange based on MS docs

Python-based CLI for automated red team infrastructure deployment on AWS and Digital Ocean, with modular support for C2, email servers, HTTP…

JavaScript beacons and C2 to be used for XSS payload or post exploitation implants on webapp servers or desktop software to monitor users and…

macOS Initial Access Payload Generator

it is malicious technique used by hackers to hide malware payloads in an encoded script in a specially crafted HTML attachment or web page

The plugin, used as a companion for the Discy and Himer themes, does not sanitise and escape a parameter on its reset password form which makes it…

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor…

Valid JQuery that profiles the system and returns info to the server in a fake analytics GET request

Exploit PoC for CVE-2026-27579, a CORS misconfiguration in Appwrite backend, demonstrating credentialed account data theft via malicious phishing…