Tools

vognik/cve-2026-26980

Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…

housma/cve-2019-9978-social-warfare-wordpress-plugin-rce

The `swp_debug` parameter in `admin-post.php` allows remote attackers to include external files containing malicious PHP code, which are evaluated on…

marco-lancini/hunt-for-cve-2018-10933

Hunt for and Exploit the libSSH Authentication Bypass (CVE-2018-10933)

topotam/petitpotam

PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.

zeronetworks/cornershot

Amplify network visibility from multiple POV of other hosts

syss-research/smbcrawler

smbcrawler is no-nonsense tool that takes credentials and a list of hosts and 'crawls' (or 'spiders') through those shares

jheeree/cve-2022-1388-checker

Simple script realizado en bash, para revisión de múltiples hosts para CVE-2022-1388 (F5)

metodidavidovic/log4j-quick-scan

Scan your IP network and determine hosts with possible CVE-2021-44228 vulnerability in log4j library.

ffuf/ffuf

Fast web fuzzer written in Go

microsoft/msrc-security-research

Security Research from the Microsoft Security Response Center (MSRC)

hahwul/mad-metasploit

Metasploit custom modules, plugins, resource script and.. awesome metasploit collection

vulnerscom/zabbix-threat-control

Zabbix vulnerability assessment plugin

assetnote/surf

Filters host lists to identify viable SSRF candidates by probing HTTP reachability and resolving internal/external IPs, bypassing traditional…

royhills/ike-scan

The IKE Scanner

m8sec/cve-2021-34527

PrintNightmare (CVE-2021-34527) PoC Exploit