CVE-2025-49844
zain3311/cve-2025-49844Exploit CVE-2025-49844 Redis Lua UAF vulnerability to execute arbitrary shellcode and establish persistent backdoor access on vulnerable Redis…
command-and-controlexploitationpayload-development+3
2
zain3311/cve-2025-49844Exploit CVE-2025-49844 Redis Lua UAF vulnerability to execute arbitrary shellcode and establish persistent backdoor access on vulnerable Redis…
sensepost/objectionFrida-powered runtime mobile exploration toolkit for assessing iOS and Android app security. Bypass SSL pinning, dump keychains, manipulate heap…
commixproject/commixAutomated Αll-in-One OS command injection exploitation tool.
farhan9488/cve-2025-55182-research🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.
ghosttroops/topTOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
berylliumsec/nebulaAI-powered penetration testing assistant for automating recon, note-taking, and vulnerability analysis.
nuguardai/nuguardopensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis
rfidresearchgroup/proxmark3Hardware tool for RFID analysis, emulation, and penetration testing. Supports 125kHz, 13.56MHz protocols (MIFARE, iClass, ISO14443/15693) with key…
sauravrao637/oproxyOpen-source MITM proxy to intercept, inspect, and mock network traffic.
m14r41/pentestingeverythingComplete Solution for VAPT/AppSec and Pentesting Guide: Web | Mobile | API | Thick Client | Source Code Review | DevSecOps | Wireless | Network…
nowsecure/r2fridaRadare2 and Frida better together.
usestrix/strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.
ostorlab/oxoModular security scanning orchestrator that combines specialized agents for vulnerability detection, reconnaissance, and fingerprinting across…
facebook/mariana-trenchA security focused static analysis tool for Android and Java applications.
cflowsec/cve-2026-89026Python PoC that forges a hard-coded HS256 JWT to exploit CVE-2026-89026 in Issabel pbxapi, enabling unauthenticated remote OS command execution via…
frida/fridaMain repo for hosting release binaries
ironfox-oss/ironfoxHardened Android web browser forked from Mull/Firefox with privacy-focused patches, anti-fingerprinting, telemetry removal, and secure defaults for…
testssl/testssl.shTesting TLS/SSL encryption anywhere on any port