Tools

cyeezy08/kimai-cve-2026-49865-poc

PoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) — Kimai time-tracking default APP_SECRET authentication bypass affecting versions ≤ 2.57.0

shinthink/cve-2026-60004

CVE-2026-60004 — Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone → post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1

oscerd/cve-2026-64640

Reproducer for CVE-2026-64640 — Apache Polaris Iceberg REST register/register-view vends storage credentials and reads an attacker-chosen metadata…

narimangharib/irgc-whatsapp-phishkit

Analysis of state-sponsored WhatsApp phishing infrastructure with real-time QR hijacking and device surveillance

0ggp4r1s/escort-network-osint

OSINT investigation uncovering coordinated escort listing networks using shared phone infrastructure, identity rotation, and cross-platform analysis.

0ggp4r1s/osint-pattern-analyzer

Automated OSINT tool for phone number discovery, pattern detection, and cross-platform correlation.

alsatianconsulting/skyprofile

A lightweight aviation intelligence tool that queries ADSB-Exchange flight data using tail numbers or ICAO identifiers to quickly profile aircraft…

naxg/cve-2020-1472

CVE-2020-1472复现流程

mdudek-ics/antiweb_testing-suite

Suite de herramientas que sacan partido del CVE-2017-9097 (+RCE)

proxydom/supahunter

Automated reconnaissance and exploitation framework for misconfigured Supabase instances. Features schema enumeration, Selenium-based key extraction,…

looky243/cve-2025-24071-poc

CVE-2025-24071 Proof Of Concept

fdzdev/cve-2024-50961

Remote attacker can access sensitive data exposed on the URL

moneertv/cve-2023-23397

CVE-2023-23397 C# PoC

r3dteam/casper-shell

Casper@shell:~# is an enhanced, more user-friendly version of p0wny shell with many new features.

scumfrog/fiberbreak

React2Shell Exploitation Tool (CVE-2025-55182)

jaycelation/cve-2025-55182

PoC, Hunting React2Shell about CVE-2025-55182