talha-nazeef-ahmed/rpc-triageA zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.
g0d150ne/xss2shellExploits WordPress pre-auth XSS (CVE-2026-64638) to achieve remote code execution, installing an AES-encrypted backdoor webshell with persistence,…
nxploited/cve-2026-13714Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution
warpedatom/offsetinspectPowerShell toolkit for AMSI/Defender detection-boundary analysis and static malware triage maps byte offsets to detection triggers, plus YARA,…
cerberusmrxi/krayincrm-rce-exploit-cve-2026-38526CVE-2026-38526 exploit for Krayin CRM v2.2.x - Authenticated RCE via TinyMCE file upload bypass. Features interactive shell, multi-type payloads,…
jenderal92/shadow-vaultShadow Vault – Add shadow users with SHA-512 hash, auto aging match, multiple write fallbacks.
blacksnufkin/geckodroidAndroid client for Adaptix C2 framework enabling remote agent management, interactive command shells, listener control, payload generation, and…
xm0kht4r/ven0m-ransomwareFully undetectable and evasive ransomware written in Rust, leveraging a BYOVD technique to disable AV/EDR solutions on the infected systems.
nxploited/cve-2025-13390WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover
cybertechajju/cve-2025-55184-poc-expolit
mylo-2001/ghoststrikeFully automated Spring4Shell (CVE-2022-22965) + GitLab RCE framework
mrpayloadc/cve-2025-0316-exploit
mawk0235/cve-2024-24401Auto exploitation tool for CVE-2024-24401.
yn1337/cve-2024-24919Mass scanner for CVE-2024-24919
wh04m1001/idiagnosticprofileuac