Tools

ssl/ezxss

Blind XSS detection and exploitation platform with persistent sessions, reverse proxy, and automated information gathering for penetration testers…

yassineaboukir/cve-2018-0296

Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.

alt3kx/cve-2021-26855_poc

Proof-of-concept exploit for CVE-2021-26855, demonstrating SSRF in Microsoft Exchange Server to access backend services and extract user information.

acceis/exploit-cve-2023-23752

Joomla! < 4.2.8 - Unauthenticated information disclosure

ibonok/cve-2020-4463

IBM Maximo Asset Management is vulnerable to Information Disclosure via XXE Vulnerability (CVE-2020-4463)

lishang520/cve-2022-24990

Proof-of-concept exploit for CVE-2022-24990 combining information disclosure and remote code execution in a single chain, targeting web applications.

absholi7ly/microsoft-edge-information-disclosure

CVE-2024-30056 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

ivanglinkin/cve-2006-3392

This small script helps to avoid using MetaSploit (msfconsole) during the Enterprise pentests and OSCP-like exams. Grep included function will help…

emreovunc/fhem-6.0-local-file-inclusion-lfi-vulnerability

Local File Inclusion (LFI) in FHEM 6.0 allows an attacker to include a file, it can lead to sensitive information disclosure.

nxploited/cve-2025-11749

AI Engine <= 3.1.3 - Unauthenticated Sensitive Information Exposure to Privilege Escalation

zer0yu/cve-2021-41277

Go-based exploit tool for CVE-2021-41277, a Metabase sensitive information disclosure vulnerability enabling local file inclusion and environment…

offlinehoster/cve-2022-26134

Information and scripts for the confluence CVE-2022-26134

phrantom/cve-2021-38314

Python exploit for CVE-2021-38314 targeting unauthenticated information disclosure in the Gutenberg Template Library & Redux Framework WordPress…

leakix/sentryexploit

CVE-2023-38035 Recon oriented exploit, extract company name contact information

emreovunc/eaton-intelligent-power-manager-local-file-inclusion

CVE-2018-12031 | LFI in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file, it can lead to sensitive information disclosure,…

cyberleelawat/exploitveer

An advanced, powerful, and easy-to-use tool designed to detect and exploit CVE-2025-5777 (CitrixBleed 2). This script not only identifies the…

flipfloptech/ncentraldumpsterdiver

This application utilized the Self Registration feature to create a rogue agent that then dumps ApplianceConfiguration settings which may or may not…

dhesitheking/localnet_attacker

This is a project about attacking and gathering information of the windows machines which is connected in the same network by using java programs