Tools

spaceplant/upnphostfileread

Arbitrary file read exploit for the Windows UPnP Device Host service.

eriknl/cve-2020-16152

Proof-of-concept exploit for CVE-2020-16152: LFI-to-RCE in Aerohive/Extreme Networks HiveOS via PHP string truncation and log poisoning, enabling…

al1ex/cve-2020-11652

Exploit for SaltStack CVEs (CVE-2020-11651/11652) enabling remote command execution on master/minions, file read/upload, and reverse shell.

minanagehsalalma/zyxel-social-login-bypass-cve-2026-8508

Public writeup, PoC, and emulation materials for CVE-2026-8508 affecting Zyxel captive-portal social login.

spaceplant/fortilpe

Local privilege escalation exploit for CVE-2025-62676.

manhndd/cve-2019-6329

Local Privilege Escalation in HP Support Assistant

jackalkarlos/evilahenk

CVE-2026-6508 LiderAhenk Merkezi Yönetim Sistemi mimarisinde, uç birimler (agents) arası tüm istemcilerin birbirleri üzerinde 'root' yetkisiyle kod…

razureink/fucker

Penetration testing framework with AI-driven decision engine

presentdaypresenttime/shai_hulud

Worm written in python, abuses CVE-2020-7247

zhulin837/checkmk_cve-2024-0670

Exploit for Checkmk CVE-2024-0670 with automated file transfer, reverse shell, and privilege escalation via RunasCs for penetration testing…

restdone/cve-2024-31771

Proof-of-concept exploit for CVE-2024-31771 demonstrating arbitrary file write in TotalAV via symbolic link attack, enabling DLL planting and SYSTEM…

fengzhouc/cve-2021-21300

Proof-of-concept exploit for CVE-2021-21300, demonstrating remote code execution via malicious git repository cloning with symlink and filter abuse…

trailer2/dll-planting-slack-4.33.73-cve-2023-38820

DLL Planting in the Slack 4.33.73 - CVE-2023-38820

fa1dz/internet-scanner

A Tkinter GUI that scans a local IPv4 network (ARP + nmap probing), shows devices, lets you run full port scans, and export results.

arpsyndicate/puncia

Panthera(P.)uncia - Official CLI utility for Subdomain Center & Exploit Observer.