Tools

lloydlabs/ntqueueapcthreadex-ntdll-gadget-injection

This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] parameters by passing a random pop r32; ret gadget can…

nathan31337/splunk-rce-poc

Python-based PoC for CVE-2023-46214 that exploits Splunk's adddatamethods feature to achieve remote code execution via a reverse shell.

sromanhu/pluck-cms-stored-xss---installation

pluck CMS 4.7.18 is affected by a Multiple Stored Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a…

orange-cyberdefense/p3-loader

P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an execution and…

securitycipher/cve-2023-24488

POC for CVE-2023-24488

jas502n/cve-2018-14665

Local privilege escalation exploit for CVE-2018-14665 targeting X.Org Server on OpenBSD and Linux. Provides a proof-of-concept script to gain root…

hev0x/cve-2021-26084_confluence

Python exploit for CVE-2021-26084, an OGNL injection vulnerability in Confluence Server/Data Center allowing authenticated or unauthenticated remote…

yoyochaud/cve-2025-49132

Exploit for Pterodactyl Panel ≤ 1.11.10 - unauthenticated LFI to RCE.

izxci/cve-2026-42758

Python exploit script for CVE-2026-42758 targeting WebinarIgnition. Supports custom target URLs, attacker email, verbose mode, and optional…

leviticus-triage/cerebro-red-v2

CEREBRO-RED v2: Advanced LLM Red Team Research Platform with PAIR Algorithm and LLM-as-a-Judge Evaluation

abdrrahimdahmani/php_filter_chains_oracle_exploit_for_cve-2023-6199

A CLI to exploit parameters vulnerable to PHP filter chain error based oracle, modified to exploit CVE-2023-6199

cbhue/pyfuscation

Obfuscate powershell scripts by replacing Function names, Variables and Parameters.

arthastang/iot-implant-toolkit

Toolkit for implant attack of IoT devices

thewover/donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs…

improsec/sharpeventpersist

Persistence by writing/reading shellcode from Event Log

greenwolf/social_mapper

A Social Media Enumeration & Correlation Tool by Jacob Wilkin(Greenwolf)