Tools

chinesespeople/cve-2026-52614

There is a SQL injection vulnerability in the backend of Ruoyi v4.8.3

ninajafli/dotcms-cve-2022-45782

Proof-of-concept for CVE-2022-45782: predictable dotCMS password-reset tokens, with a token cracker and full exploit chain.

elizeuopain/cve-2019-9053-cms-made-simple-2.2.10---sql-injection-exploit

Python exploit for CVE-2019-9053 SQL injection in CMS Made Simple 2.2.10 with password hash cracking and user enumeration capabilities.

x3rx3ssec/cve-2025-2011

Exploit for CVE-2025-2011

mishakorzik/allhackingtools

All-in-One Hacking Tools For Hackers! And more hacking tools! For termux.

c4cnm/exploit_cve-2021-24762

This repo shows an exploit to CVE-2021-24762. This is an Blind SQLi exploit that, on default config, greps the admin password.

boon-rekcah/cms-made-simple-2.2.9-cve-2019-9053

Python 3 exploit for CVE-2019-9053, an unauthenticated SQL injection in CMS Made Simple 2.2.9, that extracts admin credentials and optionally cracks…

karma-syndicate/xcrack-python-tools-for-hackers

Python Hacking Tool for Hackers And Spammers

hackheart-tech/-exploit-lab

Exploits Python cve-2019-9053– by HackHeart

mahamedm/cve-2019-9053-exploit-python-3

The exploit is edited to work with different text encodings and Python 3 and is compatible with CMSMS version 2.2.9 and below.

fin3ss3g0d/cve-2024-4956

Python utility for automating CVE-2024-4956 path traversal exploitation with mass file extraction, plus custom Hashcat module for cracking Apache…

an00brektn/shirocrack

Simple hash cracker for Apache Shiro hashes written in Golang. Useful for exploiting CVE-2024-4956.

azrenom/cms-made-simple-2.2.9-cve-2019-9053

Exploit for CVE-2019-9053, an unauthenticated SQL injection in CMS Made Simple 2.2.9, that extracts admin credentials and optionally cracks the…

ret2desync/cve-2024-38793-poc

Proof of Concept code for exploitation of CVE-2024-38793 (Best Restaurant Menu by PriceListo <= 1.4.1 - Authenticated (Contributor+) SQL Injection)

dh4nuj4/simplectf-updatedexploit

This script is a modified version of the original exploit by Daniele Scanu which exploits an unauthenticated SQL injection vulnerability in CMS Made…

ctxis/crackerjack

CrackerJack / Hashcat Web Interface / Context Information Security

davcwikla/cve-2019-9053-exploit

Working Python exploit for CVE-2019-9053 with optional password cracking via wordlist. Targets web applications via HTTP URI for automated…