
graphql-cop
Lightweight Python utility for automated security auditing of GraphQL APIs. Detects misconfigurations, information leaks, and denial-of-service…

Lightweight Python utility for automated security auditing of GraphQL APIs. Detects misconfigurations, information leaks, and denial-of-service…

A lightweight Blind XSS (Cross-Site Scripting) collector and payload server built with Flask

This is a lightweight Python helper script designed to automate the generation of sqlmap-compatible PoC files for the authenticated error-based SQL…

Lightweight scanner and Nuclei templates for identifying React and Next.js deserialization RCEs (CVE-2025-55182 / CVE-2025-66478).

CRLFISCANNER is a lightweight and powerful CLI tool designed for bug bounty hunters and penetration testers to automatically detect CRLF injection…

Lightweight Python script to test username/password combinations against Zimbra webmail login pages for security assessments and password auditing.

a lightweight JavaScript snippet showcasing how unauthorized password changes can be triggered on vulnerable Fortinet FortiSwitch GUI endpoints.

Lightweight Go toolkit plus a Dockerized Next.js lab to explore and triage CVE-2025-55182.

Standalone Python exploit for CVE-2024-46506, providing a lightweight, portable remote code execution module without requiring the Metasploit…

Lightweight Python scanner for CVE-2021-2109 that checks target URLs for the specific vulnerability with minimal dependencies.

Shelly is a lightweight and efficient vulnerability scanner designed to identify and mitigate Shellshock (CVE-2014-6271 & CVE-2014-7169)…

Proof-of-concept exploit for CVE-2024-9474 targeting Palo Alto PAN-OS. Lightweight Python script for testing vulnerability against specified URLs.

Lightweight scanner for CVE-2023-22515 that detects vulnerable Atlassian Confluence instances by probing the /server-info.action endpoint and…

Lightweight Python scanner for detecting stored XSS (CVE-2025-0054) in SAP NetWeaver Java. Submits customizable payloads and checks for script…

Lightweight Java toolkit for building high-performance web applications, with a focus on exploiting CVE-2019-17513 for security testing and…

Lightweight Java-based checker for CVE-2022-42889 (Apache Commons Text RCE). Quickly validates if a target is vulnerable to the Text4Shell remote…

Automated SQL injection detection and exploitation tool for extracting database information from web applications, supporting multiple injection…

A PHP backdoor management and generation tool/C2 featuring end to end encrypted payload streaming designed to bypass WAF, IDS, SIEM systems.