Tools

0xbruno/wsusploit.net

C# proof-of-concept for CVE-2025-59287 targeting WSUS, demonstrating exploitation and providing defensive detection guidance for IIS logs and Windows…

sn0x-sharma/cve-2026-44401

Persistent XSS in Typemill CMS: the Markdown parser lets javascript: URIs through unfiltered. Writeup + PoC.

nvisosecurity/interceptor

Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space

zblurx/impersonate-rs

Rusty Impersonate

berraesen/nextjs-middleware-auth-bypass-lab

Bu laboratuvar ortamını sıfırdan kendim oluşturdum. Next.js uygulaması içerisinde giriş, ana sayfa ve admin sayfalarını hazırladım. Middleware ile…

mauricelambert/cve-2021-31166

CVE-2021-31166: exploitation with Powershell, Python, Ruby, NMAP and Metasploit.

edubr2020/realplayer_g2_rce

Proof-of-concept exploit for a Remote Code Execution vulnerability in RealPlayer G2 ActiveX control, leveraging javascript: and mhtml: URIs to…

knqyf263/go-cpe

A Go library for CPE (A Common Platform Enumeration 2.3)

jas502n/hscan

Hscan-Win-Gui

hackingdave/btrpa-scan

Bluetooth Low Energy (BLE) scanner with Resolvable Private Address (RPA) resolution using Identity Resolving Keys (IRKs)

mseymend/cve-2024-21413

CVE-2024-21413 Açığını Kullanarak Giriş Bilgilerini Alma

nu11secur1ty/iis-backdoor

Stealthy IIS backdoor using hidden ISAPI filter for persistent remote access, data exfiltration, and on-the-fly exploit injection via custom HTTP…

owasp-modsecurity/modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based…

midisec/cve-2023-36899

CVE-2023-36899漏洞的复现环境和工具，针对ASP.NET框架中的无cookie会话身份验证绕过。

mauricelambert/cve-2022-21907

CVE-2022-21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit. Detection and…

nika0x38/cve-2017-7269

A Rust implementation of the POC for CVE-2017-7269, targeting the WebDAV service in Microsoft Internet Information Services (IIS) 6.0.

p0dalirius/cve-2022-21907-http.sys

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers