
cipherscan
A very simple way to find out which SSL ciphersuites are supported by a target.

A very simple way to find out which SSL ciphersuites are supported by a target.

Scans SSL/TLS certificates for expiry dates, issuer details, and OCSP status. Sends notifications via webhook, Telegram, or Slack. Supports proxy per…

Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)

CVE-2025-55182 Detector. Find which of your GitHub repositories are exposed to the critical React/Next.js RCE vulnerability and generate a clean…

a recon tool that finds sensitive data inside the screenshots uploaded to prnt.sc

PoC, Hunting React2Shell about CVE-2025-55182

uDork is a script written in Bash Scripting that uses advanced Google search techniques to obtain sensitive information in files or directories, find…

Python exploit for CVE-2022-28171 targeting Hikvision Hybrid SAN devices, automating blind SQL injection and command injection to achieve remote code…

Python3 script to scan for Linksys smart wifi devices that are vulnerable to CVE-2014-8244

There are many cheat sheets out there, but this is mine.

This tool calculates tricky canonical huffman histogram for CVE-2023-4863.


Proof of Concept for CVE-2021-33624

Shell script to recursively scan folders for Go binaries using insecure pem.Decode function, detecting vulnerable or stripped binaries for…

A script that can see if an email address is valid in Office365 (user/email enumeration). This does not perform any login attempts, is unthrottled,…

This is an exploit script to find out wordpress admin's username and password hash by exploiting CVE-2024-1698.

Know a plugin has a php object exploit but need to find which lib to use?