huseyinstif/cve-2024-28995-nuclei-templateNuclei template for detecting CVE-2024-28995, a directory traversal vulnerability in Serv-U FTP server, enabling file read via crafted HTTP requests.
rxerium/cve-2022-24086An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing arbitrary markup to…
psibot/apache-vulnerableDetects Apache HTTP Server path traversal vulnerabilities (CVE-2021-41773, CVE-2021-42013) by checking for exposure of /etc/passwd through…
rxerium/cve-2025-58360Passive detection for CVE-2025-58360
zerobyte-id/bashterWeb Vulnerability Scanner using Shell Script
the-robot/sqlivmassive SQL injection vulnerability scanner
dwisiswant0/findom-xssA fast DOM based XSS vulnerability scanner with simplicity.
opiniondealer/crawlboxPython script that brute-forces web directories and admin paths using built-in or custom wordlists, with configurable request delays for directory…
r0gfall/cve-2026-88804Python script that checks Rancher instances for CVE-2026-88804 stored XSS and optionally injects an alert(1) payload to confirm exploitation.
d0ge/websocketturbointruderBurp Suite extension for fuzzing WebSocket messages with custom Python code, supporting multiple engines, HTTP middleware routing, and response…
cyber-note/cve-2026-34835-black-box-analysisA black-box (DAST) security analysis of CVE-2026-34835 focusing on external validation methodology, observable behavior, security impact, and…
jenderal92/clickjacking-exploit-detectorThe Clickjacking Exploit Detector uses webpage scanning techniques to identify potential vulnerabilities and provide analysis of those elements.
be-keb/cve-2026-12227Proof-of-concept and technical analysis for CVE-2026-12227, an unauthenticated LFI in the WordPress Visual Composer plugin (<=45.16.0) enabling file…
nu11secur1ty/wssBlack-box WordPress vulnerability scanner that detects security issues, enumerates users, brute-forces logins via XMLRPC, and performs static PHP…
cappricio-securities/crlfi-scannerCRLFISCANNER is a lightweight and powerful CLI tool designed for bug bounty hunters and penetration testers to automatically detect CRLF injection…
jenderal92/cve-2024-10508This tool scans WordPress sites for vulnerabilities in the "RegistrationMagic" plugin (CVE-2024-10508). It checks for the presence of a specific…
shoucheng3/spring-cloud__spring-cloud-gateway_cve-2022-22947_3-0-6Spring Cloud Gateway repository demonstrating CVE-2022-22947 exploitation for API security testing and vulnerability analysis.
