Tools

appsec-forge/appsec-forge

Structured security knowledge base with production-inspired cases: vulnerability analysis, exploit explanation, remediation, and DevSecOps for…

sonalisarkar-2003/ftp-vsftpd-cve-2011-2523-vapt-report

VAPT report for vsFTPd 2.3.4 backdoor CVE-2011-2523, covering Nmap vulnerability scanning, Metasploit exploitation, post-exploitation root access,…

gduma-phdata/patch-cve-2026-04321

Patch for CVE-2026-04321, a critical OS command injection vulnerability in Zyxel firewalls. Includes deployment status and references for remediation.

ianxtianxt/cve-2017-12615

Batch script for exploiting CVE-2017-12615 (Apache Tomcat PUT method vulnerability) to upload and execute arbitrary JSP files on vulnerable servers.

cerberusmrxi/wp-contest-gallery-28.1.4-exploit

Complete exploitation toolkit for CVE-2026-3180 - WordPress Contest Gallery SQL Injection vulnerability. Features automated data extraction, WAF…

ggfzx/cve-2024-36104

Exploit tool for CVE-2024-36104 targeting Apache OFBiz code execution vulnerability. Supports single and batch URL scanning with proxy and threading…

ggfzx/cve-2024-28995

Exploit for CVE-2024-28995 targeting Serv-U arbitrary file read vulnerability. Supports single and batch URL scanning with proxy and threading…

frenzymadness/cve-2021-3572

Minimal test repository for CVE-2021-3572, demonstrating a pip dependency confusion vulnerability and its fix across vulnerable and patched versions.

tausifzaman/cve-2026-3844

PoC exploit for CVE-2026-3844, a critical unauthenticated file upload vulnerability in the WordPress Breeze plugin leading to RCE.

lhc321-source/cve-2024-36837

Proof-of-concept exploit for CVE-2024-36837, an unauthenticated arbitrary file read vulnerability in Zhilianyun SRM2.0. Includes batch scanning and…

hsltz/cve-2025-68493

Python PoC script and Nuclei YAML template for detecting and exploiting CVE-2025-68493, an XXE vulnerability in Apache Struts, enabling file read and…

ixsly/cve-2022-41401

Proof-of-concept exploit for CVE-2022-41401, a server-side request forgery (SSRF) vulnerability in OpenRefine <= v3.5.2, enabling unauthorized…

davuxvi/cve-2023-27163

Proof-of-concept exploit for CVE-2023-27163, a Server-Side Request Forgery (SSRF) vulnerability in request-baskets up to v1.2.1. Includes automated…

rudsarkar/cve-2026-42228

Proof-of-concept exploit for CVE-2026-42228, an unauthenticated chat execution hijacking vulnerability in n8n, with automated scanning and attack…

itstarsec/cve-2025-48703

Proof-of-concept exploit for CVE-2025-48703, an unauthenticated remote code execution vulnerability in CentOS Web Panel (CWP) versions prior to…

shahdawadfallah-sys/cybersecurity-capstone-project

Cybersecurity Capstone Project completed during the NCSC Nashama CyberCamp 11, delivered in collaboration with IT Security C&T. The project…

dem0ns/cve-2026-43735

Proof-of-concept exploit for CVE-2026-43735, a WebKit cross-origin information disclosure vulnerability in Safari < 26.5.2. Demonstrates leaking user…