
poc-CVE-2026-64638-
PoC exploit chain for WordPress pre-auth XSS to RCE via DOM clobbering, REST JSONP/SOME, and plugin upload, with Docker lab verification and…

PoC exploit chain for WordPress pre-auth XSS to RCE via DOM clobbering, REST JSONP/SOME, and plugin upload, with Docker lab verification and…

Lnk crafting and research tools

Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure

A practical chain that starts with an innocuous PDF file and ends up in a reverse shell on an AWS EC2 instance

Osintgram is a OSINT tool on Instagram. It offers an interactive shell to perform analysis on Instagram account of any users by its nickname

Use a Fake image.jpg to exploit targets (hide known file extensions)

xll windows reverse shell

PowerShell script that invokes legitimate credential prompts and exfiltrates captured passwords over DNS using CredentialPicker and Resolve-DnsName.

transform your payload.exe into one fake word doc (.ppt)

Trojanize your payload - WinRAR (SFX) automatization - under Linux distros