Tools

bcardinale/cve-2015-4670-vuln-app

This app is the standard Asp.Net default web app with an old version of the AjaxControlToolkit, put here for those interested in CVE-2015-4670

adeyosemanputra/pygoat

intentionally vuln web Application Security in django

bambish/scanqli

SQLi scanner to detect SQL vulns

randomrobbiebf/nuclei-drupal-sa

Nuclei templates for drupal vulns... far from perfect

salehlardhi/cve-2023-3519

CVE-2023-3519 vuln for nuclei scanner

bilkoh/poc-cve-2021-22204

POC for exiftool vuln (CVE-2021-22204).

r3dcl1ff/cve-2022-41040

mitigation script for MS Exchange server vuln

s0ck37/cve-2025-22131-poc

POC for the vuln CVE-2025-22131

anomalousvectors/cve-2024-4367-poc

POC for PDF JS' CVE-2024-4367 vuln

nickpaulsec/2026-41940-poc

CVE-2026-41940: detect and exploit cpanel vuln

randomrobbiebf/s3-from-csp

Extracts all S3 Buckets from CSP report headers and then tests for file upload vulns

randomrobbiebf/struts-splunk

Vuln Apache Struts with splunk

aredspy/cve-2021-41182-tester

Some test files to make a good nuclei template for a JQuery UI XSS vuln

anomalousvectors/cve-2022-24785-poc-lab

Moment.js vuln lab

damian972/drupalgeddon-2

Vuln checker for Drupal v7.x + v8.x (CVE-2018-7600 / SA-CORE-2018-002)

sandblastx/flask-vuln-v3

CVE-2024-34064 demo - v3 subtle vuln no misleading comment

simonecris/cve-2021-42362-poc

Wordpress Most Popular Post plugin vuln

capture0x/lfi-space

Automated Local File Inclusion (LFI) vulnerability scanner with Google Dork search and targeted URL scan modes for web application security testing.