Tools

leebaird/discover

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…

wattocyber/custom-oscp-tooling

OSCP-focused toolkit for read-only network, SMB, AD, DNS, web, and database enumeration; privesc scanning, hash identification, and…

omribaso/sccm-cve-2026-47301-remote-code-execution-exploit

Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path…

thelicato/secbutler

The perfect butler for pentesters, bug-bounty hunters and security researchers

0xlipon/xss2shell

Behavior-first WordPress CVE-2026-64638 scanner using benign login probes; classifies sanitizer behavior and generates alert-only PoCs for authorized…

s3n4t0r-0x0/apts-adversary-simulation

Realistic APT adversary simulation campaigns with custom C2 frameworks, backdoors, stagers, and bootloaders mirroring state-sponsored TTPs for red…

shinthink/cve-2026-58480

Proof-of-concept exploit for unauthenticated remote code execution in Blocksy Companion Pro via double-extension file upload bypass.

xshadow-here/cve-2026-4883

Piotnet Forms Pro <= 2.1.40 - Unauthenticated Arbitrary File Upload → RCE

oscar-mine/r2sae

Firefox extension for detecting and exploiting CVE-2025-55182 — Prototype Pollution RCE in Next.js React Server Actions

heventafese/penetration-testing-walkthrough-hacksudo-thor

Step-by-step black-box penetration test walkthrough exploiting Shellshock RCE (CVE-2014-6271) via Apache mod_cgi, chained with sudo misconfiguration…

opsecramdan/react2shell-cve-2025-55182

Automated exploitation framework for CVE-2025-55182 (Next.js RCE) with subdomain enumeration, vulnerability scanning, payload generation, and…

ls4ss/cve-2021-41773_cve-2021-42013

Exploit script for Apache HTTP Server 2.4.49/2.4.50 path traversal and remote code execution vulnerabilities (CVE-2021-41773, CVE-2021-42013).…

exrienz/cve-2025-55182-nextjs-scanner-react2shell-poc

Automated detection and exploitation toolkit for CVE-2025-55182, a critical RCE in Next.js React Server Components. Features multi-layered…

cirqueiradev/massexploit-cve-2024-4577

Mass scanner and exploit tool for CVE-2024-4577, a PHP-CGI argument injection vulnerability, enabling automated detection and exploitation of…

sincan2/rce-cve-2025-32710

Windows Remote Desktop Services Vulnerability Allows Remote Code Execution

zyn3rgy/ecp_slap

Proof-of-concept exploit for CVE-2020-0688 targeting on-prem Microsoft Exchange. Includes scanning, cookie harvesting, payload generation via…

charondefalt/cve-2024-27198-rce

Exploit for JetBrains TeamCity authentication bypass (CVE-2024-27198) enabling remote code execution, with webshell upload and connection…

ghosttroops/scan4all

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…