op4
opfour/op4Terminal-based encrypted messenger with post-quantum cryptography, Double Ratchet protocol, and Tor anonymity. Features duress passphrase, deniable…
authenticationauthentication-authorizationcryptography+3
6
opfour/op4Terminal-based encrypted messenger with post-quantum cryptography, Double Ratchet protocol, and Tor anonymity. Features duress passphrase, deniable…
adhikara13/cve-2023-25136OpenSSH Pre-Auth Double Free CVE-2023-25136 POC
mishra0230/cve-2023-38831CVE-2023-38831 - WinRAR
berabuddies/redis-pocRCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0, 8.8.1
softdeadlock/voron-cryptoVoron messenger crypto/protocol library (X3DH-lite + Double Ratchet, group sender-keys, onion transport) — external review requested
4w4k3/umbrellaA Phishing Dropper designed to Pentest.
epsilonpointori/ikev2-pocIKEv2, ikeext.dll, CVE-2026-33824, double free, heap grooming, ROP, SKF fragmentation, Windows exploit, anti-debug, obfuscation, API hooking,…
bhideki/cve-2026-87902Python PoC and scanner for CVE-2026-87902, a WordPress core path traversal leading to LFI and PEAR-based RCE, with WAF bypass and automated…
zerx0r/dvenom🐍 Double Venom (DVenom) is a tool that provides an encryption wrapper and loader for your shellcode.
rjsudlow/proxynotshell-ioc-checkerScript to check for IOC's created by ProxyNotShell (CVE-2022-41040 & CVE-2022-41082)
xeloxa/cve-2026-23918-apache-h2-pocProof-of-Concept exploit for CVE-2026-23918 (Apache mod_http2 double-free). Features multi-mode DoS (Rapid-RST, Slow-Drip) and passive…
colere-sys/wp2shell-pocAnalysis and end-to-end implementation of the patched wordpress RCE vulnerability - CVE-2026-60137 and CVE-2026-63030
qassam-315/cve-2026-23918-elite-auditorElite reconnaissance script for auditing Apache's HTTP/2 stack against memory corruption (CVE-2026-23918). Features ALPN protocol forcing and…
joapath/cve-2021-42013Proof-of-concept exploit for CVE-2021-42013, demonstrating path traversal and remote code execution on Apache 2.4.50 via double URL encoding bypass…
r00tali/cve-2026-39200The value of the produk request parameter is copied into the value of an HTML tag attribute which is encapsulated in double quotation marks. The…
sqlsure/sqlsureSemantic inspector for SQL — catches fan-out double-counting, additivity violations, wrong join keys, and policy breaches before the query runs.…
gray-0men/cve-2024-22774Panoramic Dental Imaging software Stealthy Privilege Escalation Vulnerability
an00byss/doublehopA Tool to use PowerShell Remoting / WinRM to execute PowerShell commands on remote hosts through WinRM double hop technique.