Tools

doctoreww/evilfonttool

A font-based deception tool for red teaming, security research, and whatever else.

mohwahyudi/poc-cve-2026-64638-

PoC exploit chain for WordPress pre-auth XSS to RCE via DOM clobbering, REST JSONP/SOME, and plugin upload, with Docker lab verification and…

criticalpathsecurity/zeek-intelligence-feeds

Aggregated Zeek-format threat intelligence feeds with combined indicators from public and curated sources for continuous IDS and network threat…

ceramicskate0/sharpexchange

C# Tool to interact with MS Exchange based on MS docs

logisek/azureadenumeration

Microsoft Entra ID (Azure AD) Unauthenticated Enumeration

agampreet-singh/redroot

RedRoot is a Python-based, CLI-driven offensive security framework that brings essential red teaming tools into one unified terminal environment.…

hackerxphantom/spoof_anymail

Most Powerful Send Fake Mail Using Any Mail I'd undetectable

leocottret/cve-2024-30956

(DOM-based XSS) HTML Injection vulnerability in TOWeb v.12.05 and before allows an attacker to inject HTML/JS code via the _message.html component.

k3ystr0k3r/cve-2021-4191-exploit

A PoC exploit for CVE-2021-4191 - GitLab User Enumeration.

h1ssbl1tz/blind-trust-cve-2024-21413-research

A security research tool for simulating targeted phishing campaigns using CVE-2024-21413 (Moniker Link).

osintnet/osintnet-public

OsintNET is a browser-based OSINT platform for domain intelligence, website risk scanning, SERP discovery, image intelligence and AI image detection.

d4op/cve-2023-51764-poc

just idea, no cp pls

absholi7ly/microsoft-edge-information-disclosure

CVE-2024-30056 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

shredzwho/ig-detective

OSINT tool researched and designed to hunt down IG handles

deadshot0x7/007-thebond

This Script will help you to gather information about your victim or friend.

mharjac/bad_ducky

Rubber Ducky compatible clone based on CJMCU BadUSB HW.