sinsinology/cve-2024-6670Proof-of-concept exploit for Progress WhatsUp Gold SQL injection authentication bypass (CVE-2024-6670). Includes root cause analysis and automated…
projectdiscovery/nucleiFast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…
chaitin/safelineSelf-hosted WAF and reverse proxy that filters malicious HTTP traffic, blocks SQL injection, XSS, and bot attacks, with rate limiting and dynamic…
bunkerity/bunkerweb🛡️ Open-source and cloud-native Web Application Firewall (WAF)
coreruleset/corerulesetGeneric attack detection rule set for web application firewalls, protecting against OWASP Top Ten and common vulnerabilities with minimal false…
xkiian/awswafAWS WAF Solver, full reverse implemented in 100% Python & Golang.
xkiian/vercel-botidVercel BotID Solver "X-Is-Human" using 100% golang
epsilonpointori/epsilonpointlnkGenerates obfuscated .lnk files exploiting CVE-2026-21510 with LNK stomping, encrypted payloads, and anti-forensics for authorized penetration…
tinashelorenzi/cve-2025-55182Proof-of-concept exploit for CVE-2025-55182, a critical unauthenticated RCE in React Server Components. Includes automated Python exploit, technical…
isabbii/poc---cve-2023-26482-rce-lab-nextcloudDocker-based lab reproducing CVE-2023-26482 (Nextcloud RCE) with automated exploit script for educational vulnerability analysis and exploitation…
dungsocool/cve-2026-60137_cve-2026-63030WordPress unauthenticated RCE exploit combining route confusion and SQL injection. Automated script, lab setup, and detailed vulnerability analysis…
izxci/cve-2026-49777Python exploit for CVE-2026-49777, a critical unauthenticated RCE in ShapedPlugin Product Slider Pro for WooCommerce. Includes automated detection…
anshumanpattnaik/http-request-smugglingCLI tool to detect HTTP Request Smuggling vulnerabilities using time-delay analysis with built-in CL.TE and TE.CL payloads for automated security…
sech0us3/waf-checkerAutomated WAF assessment tool that detects firewall vendors, tests 19 attack categories with advanced evasion payloads, and provides color-coded…
chessredoffsec/cve-2022-29056Automated Python script with GUI for testing login endpoint responses with configurable payload sizes, designed for educational security testing and…
chessredoffsec/cve-2023-26208Python script with GUI for automated payload testing against login endpoints, designed for educational exploitation simulation and vulnerability…
eytannatye/r2s_cve-2025-55182Automated vulnerability scanner for CVE-2025-55182 (Next.js RCE) with RCE detection, timing analysis, version identification, WAF detection, and…
