watchtowrlabs/watchtowr-vs-citrix-netscaler-cve-2026-88772Detection artifact generator for Citrix NetScaler CVE-2026-88772 that builds a DTLS pre-auth buffer overflow payload to verify remote code execution.
yym8538/cve-2026-5027Proof-of-concept exploit for CVE-2026-5027, a path traversal and arbitrary file write in Langflow's /api/v2/files endpoint, with Docker lab and…
omer-efe-curkus/cve-2026-33017-langflow-rce-pocThe vulnerability in Langflow 1.8.1 and earlier allows a remote, unauthenticated attacker to achieve arbitrary command execution on the host.
cedowens/macshellswiftProof of concept MacOS post exploitation tool written in Swift. Designed as a POC for blue teams to build macOS detections. Author: Cedric Owens
secureworks/tokenmanPost-exploitation toolkit for Azure AD: fetch/search Microsoft Graph data, swap FOCI refresh tokens, and generate Azure CLI auth files from tokens.
temp43487580/entrapassthecerttool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it
xaitax/chrome-app-bound-encryption-decryptionBypass Chromium's App-Bound Encryption via Direct Syscall-based Reflective Process Hollowing. Extract cookies, passwords, payment methods & tokens…
logangoins/cable.NET post-exploitation toolkit for Active Directory reconnaissance and exploitation
nccgroup/change-lockscreenOffensive tool to trigger network authentications as SYSTEM
blue0x1/sqlwindsSQLWinds - SQL Server Security Assessment & Post-Exploitation Toolkit
dinosn/cve-2026-34197CVE-2026-34197 activemq PoC
cys3c/evilosxA pure python, post-exploitation, remote administration tool (RAT) for macOS / OS X.
00xglitch/bellaBella is a pure python post-exploitation data mining tool & remote administration tool for macOS. 🍎💻
mpgn/cve-2019-0192RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl
mr-r3bot/wso2-cve-2022-29464Pre-auth RCE bug CVE-2022-29464
watchtowrlabs/fortijump-exploit-cve-2024-47575Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575
mrr0b0t19/cve-2026-23744-pocProof-of-concept exploit for CVE-2026-23744, a remote code execution vulnerability in MCPJam Inspector. Demonstrates RCE via crafted HTTP request to…
nexxp90/cve-2025-55182_rce_exploitREC Exploit is a Python-based security testing tool that automates detection of potential RCE conditions in web applications under authorized…
