Tools

0xlipon/xss2shell

🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit

atiilla/sqlmap-ai

This script automates SQL injection testing using SQLMap with AI-powered decision making.

jenderal92/cve-2026-49049

Mass vulnerability scanner for CVE-2026-49049 – Unauthenticated Remote Code Execution in Joomla Helix3 plugin. Multi‑threaded, detects both executed…

ianxtianxt/automated-blind-xss-search-for-burp-suite

BurpSuite插件，用于自动化执行blind-xss盲搜索。它能够执行主动和被动检查。

ma1dong/vcenter_rce

漏洞利用，Vmware vCenter 6.5-7.0 RCE（CVE-2021-21972），上传冰蝎3，getshell

monzaviman/cve-2025-9816

Proof of Concept for Stored-XSS on Vulnerable WP-Statistics Plugin known as CVE-2025-9816

sma11new/poclist

漏洞POC、EXP合集，持续更新。Apache Druid-任意文件读取（CVE-2021-36749）、ConfluenceRCE（CVE-2021-26084）、ZeroShell防火墙RCE（CVE-2019-12725）、ApacheSolr任意文件读取、蓝凌OA任意文件读取、phpStud…

thelsa/vbulletin5-rce

CVE-2019-16759 vbulletin 5.0.0 till 5.5.4 pre-auth rce

zzhorc/cve-2025-55182

CVE-2025-55182复现环境及RCE回显poc

xiaolvchen/cve-2025-55182

CVE-2025-55182（React Server Components 反序列化远程代码执行漏洞）