
kali-linux-docker
Minimal Kali Linux Docker base image for building custom penetration testing environments. Install tools like Metasploit and sqliv2 for security…

Minimal Kali Linux Docker base image for building custom penetration testing environments. Install tools like Metasploit and sqliv2 for security…

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…

Automated Server-Side JavaScript Injection detection and exploitation tool for Node.js services, supporting blind and results-based injection with…

Template-driven reflected XSS scanner that generates obfuscated, unique payloads to evade detection, with support for custom headers, proxy, polyglot…

Agent dispatcher that launches security tools and sends structured results to the Faraday platform. Supports custom executors and integrates with…

Serverless AWS solution for distributing recon and vulnerability scanning workloads. Submit tasks via web UI; EC2 workers execute custom Python…

Proof-of-concept exploit script for CVE-2024-24919 that scans target URLs via HTTP POST requests, analyzes responses for unauthorized access or data…

Python-based RCE detection tool that sends crafted POST requests, analyzes responses for execution indicators, and supports batch scanning with…

Automated scanner for CVE-2025-55182 RCE in Next.js with 8 WAF bypass techniques, custom command execution, and test-only detection mode for…

Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port…

High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)

Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner

Simulates the Windows PE loader to identify DLL hijacking vulnerabilities, generates weaponized DLLs with shellcode payloads, and detects UAC…

A simple tool for bypassing file upload restrictions.

This script automates SQL injection testing using SQLMap with AI-powered decision making.

tomcat自动化漏洞扫描利用工具,支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含

漏洞POC、EXP合集,持续更新。Apache Druid-任意文件读取(CVE-2021-36749)、ConfluenceRCE(CVE-2021-26084)、ZeroShell防火墙RCE(CVE-2019-12725)、ApacheSolr任意文件读取、蓝凌OA任意文件读取、phpStud…

Multi-mode vulnerability scanner for CVE-2025-66478 (Next.js RSC RCE) with WAF bypass, interactive shell, batch scanning, and JSON automation output…