NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js
☆92Apr 12, 2025Updated last year
Alternatives and similar repositories for NextSploit
Users that are interested in NextSploit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ICU-WP is a Flask-based WordPress username enumeration tool. It detects WordPress sites and uses methods like author URL checks, REST API…☆16Jan 17, 2025Updated last year
- PolyCaptcha is a Flask‑based web application that mimics Google’s image‑based reCAPTCHA flow to demonstrate how attackers can use visual …☆11Jul 24, 2025Updated last year
- Modular Windows toolkit for Chrome history harvesting & red team demos.☆15Mar 2, 2026Updated 7 months ago
- DeConfigro is a tool that scans WordPress websites for the WordPress Setup Config Vulnerability. If exposed, this page indicates an incom…☆19Mar 9, 2026Updated 7 months ago
- I made a little recon tool I built this small project to scan for subdomains & hidden directories. It checks both normal style (sub.doma…☆14Aug 25, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- XSSGAI is the first-ever AI-powered XSS (Cross-Site Scripting) payload generator. It leverages machine learning and deep learning to crea…☆44Feb 4, 2026Updated 8 months ago
- ShoDam is a simple and effective bookmarklet designed to extract IP addresses from Shodan search results with a single click.☆21Nov 13, 2024Updated last year
- This GitHub Pages site serves as a creative demonstration of website defacement, featuring an engaging interface and audio elements. IT i…☆13Sep 25, 2024Updated 2 years ago
- GitIntel is a robust GitHub OSINT tool crafted to reveal concealed insights from GitHub repositories and user profiles. Its capabilities …☆19Jan 29, 2025Updated last year
- A lightweight Windows automation tool which works on Windows only that automatically copies selected user folders to a USB drive.☆17Jun 2, 2026Updated 4 months ago
- CoupDeWeb is an automated web vulnerability scanner designed for security researchers and developers. It scans for potential vulnerable …☆34Oct 17, 2024Updated 2 years ago
- ScriptoX is a versatile tool that enables users to create SVG and PDF files with embedded JavaScript code.☆20Oct 17, 2024Updated 2 years ago
- TorrentSpyder is a command-line utility designed to retrieve Torrent Download History based on a specified IP address.☆21Oct 19, 2024Updated 2 years ago
- BeeXSS is a specialized automated tool designed to detect Blind XSS (Cross-Site Scripting) vulnerabilities in web applications.☆39Dec 3, 2024Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Xploitra is a powerful reverse shell payload generator for educational and security testing. It offers customizable payloads with advance…☆74Oct 17, 2024Updated 2 years ago
- AKQ_0D_PE is a lightweight and powerful Zero-day local privilege escalation exploit targeting a critical vulnerability in the Linux PipeF…☆13Apr 18, 2025Updated last year
- TimeVault is a specialized automated tool designed to detect potential information disclosure vulnerabilities in web applications by leve…☆43Jan 29, 2025Updated last year
- Injectra is a Python-based tool for injecting custom payloads into various file types using their magic numbers. It supports file types l…☆150Jan 12, 2025Updated last year
- I-Espresso is a tool that enables users to generate Portable Executable (PE) files from batch scripts. Leveraging IExpress, it demonstrat…☆84Oct 17, 2024Updated 2 years ago
- Oty is a fast, customizable, CLI tool designed to streamline your Bug Bounty and Pentesting workflows. Powered by a simple yet flexible Y…☆28Jan 27, 2025Updated last year
- ☆44May 4, 2025Updated last year
- ☆75Jul 15, 2026Updated 3 months ago
- ☆204Aug 23, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆143Feb 3, 2025Updated last year
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- ☆14Jul 18, 2026Updated 3 months ago
- Algopwn is an interactive Python tool for security researchers and bug-bounty hunters to audit Algolia API keys. It detects ACLs, disting…☆11Nov 6, 2025Updated 11 months ago
- best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect☆1,616Dec 7, 2025Updated 10 months ago
- CORS Exploit POC for WordPress REST API☆11Oct 27, 2024Updated 2 years ago
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆17Sep 23, 2026Updated last month
- **CVE-2026-2636** is a vulnerability in the Windows Common Log File System (CLFS) driver (`CLFS.sys`). An unprivileged user can trigger a…☆16Feb 26, 2026Updated 8 months ago
- ☆547Aug 21, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆60Jul 15, 2026Updated 3 months ago
- Authorization Bypass in Next.js Middleware☆10Mar 23, 2025Updated last year
- ☆56Jun 28, 2026Updated 4 months ago
- FortiSandbox RCE Scanner — CVE-2026-39808☆26Apr 21, 2026Updated 6 months ago
- ☆658Oct 19, 2026Updated last week
- CVE-2026-64638: WordPress Pre-auth XSS → RCE (XSS2Shell) PoC☆13Aug 8, 2026Updated 2 months ago
- bring shodan facets into your terminal without API key.☆111Oct 21, 2025Updated last year