XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template
☆57Aug 21, 2026Updated last month
Alternatives and similar repositories for CVE-2026-64638-PoC-XSS2Shell-
Users that are interested in CVE-2026-64638-PoC-XSS2Shell- are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Chess.com unlimited analysis (server side) for free tier!☆56May 25, 2026Updated 4 months ago
- A powerful subdomain enumeration tool that aggregates data from multiple sources to create comprehensive lists of root subdomains.☆70Oct 8, 2026Updated last week
- Practical password-security research covering hash recovery, attack techniques, authentication auditing, security tools, and controlled l…☆64Aug 9, 2026Updated 2 months ago
- A simple script that pushes a file to the Android device and hooks the relevant functions with Frida to override the application's behavi…☆15Oct 9, 2024Updated 2 years ago
- ☆18Aug 23, 2026Updated last month
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases☆316Sep 30, 2026Updated 2 weeks ago
- LiteSpeed Cache Privilege Escalation PoC☆23Aug 25, 2024Updated 2 years ago
- ☆16Aug 10, 2025Updated last year
- CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfi…☆16Jul 29, 2026Updated 2 months ago
- Find and assess exposed Google Gemini API keys across web assets and Android apps.☆126Sep 21, 2026Updated 3 weeks ago
- Real-time data anonymization for LLMs: secure your logs and conversations across cloud or local environments. Docker-ready & Multi-IA sup…☆28Aug 14, 2026Updated 2 months ago
- This repository discusses the subdomain takeover vulnerability and lists of services which are vulnerable to it. It also provides informa…☆13Dec 31, 2023Updated 2 years ago
- Cek Nik KTP Indonesia☆22Jul 14, 2021Updated 5 years ago
- ☆10Jul 10, 2012Updated 14 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A toolkit for testing and benchmarking WPI techniques☆21Sep 2, 2026Updated last month
- An agentic mobile security research system built as a Claude Code project. An orchestrator spawns focused sub-agents, each with one narro…☆41Sep 1, 2026Updated last month
- Comprehensive, data-driven security assessment checklists across 23 platforms web, API, mobile, cloud, Active Directory, Kubernetes, LLM,…☆86Sep 16, 2026Updated last month
- Android security and penetration testing, from first principles to senior practitioner. 81 chapters, ~327 labs, measured rather than reci…☆62Aug 18, 2026Updated 2 months ago
- Android Penetration Testing Tool — Auto Root Detection & SSL Pinning Bypass with Frida Script Generation☆36May 13, 2026Updated 5 months ago
- 2-10g OVH, 90-100G UDP Stable Power☆13May 1, 2026Updated 5 months ago
- Run CobaltStrike aggressorscript over TCP☆16Feb 9, 2026Updated 8 months ago
- ICMP denial of service heavily multi-threaded Tool☆12Mar 3, 2026Updated 7 months ago
- Dorkx Tor🔬🏴☠️ || SQL Dork Searcher 🕵️ using IP Tor Rotation 🔄☆12Feb 12, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- BlackBox is a virtual engine, it can clone and run virtual application on Android, users don't have to install APK file to run the appli…☆12Nov 3, 2022Updated 3 years ago
- Two-model debate review of PRs and MRs, plus a babysitter that works the review rounds. Skills for any coding agent.☆148Oct 9, 2026Updated last week
- Browser-Based Clickfix Generator☆25Sep 25, 2026Updated 3 weeks ago
- It is a script written in Python that performs brute force on workers' payroll files through the use of their DNI (National Identity Docu…☆13Oct 6, 2020Updated 6 years ago
- AI-powered Nuclei template prioritization using deep target fingerprinting and TypeSafe Jev to surface relevant security findings faster.☆31Oct 8, 2026Updated last week
- xsschecker tests endpoints for reflected XSS by injecting payloads and checking responses. It prints vulnerable if the payload is reflect…☆38Nov 3, 2025Updated 11 months ago
- All Exploit List Made By Me☆17Apr 7, 2025Updated last year
- Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS pinning. Persistent, no Frida session…☆128Aug 7, 2026Updated 2 months ago
- ☆13Mar 6, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- XSS Payload Cheat Sheet☆11Sep 1, 2024Updated 2 years ago
- Extract hashes from VBK files -- cause it's fun...☆52Aug 10, 2026Updated 2 months ago
- Membuat Aplikasi Hitung Ongkos Kirim dengan API Raja Ongkir☆12Mar 5, 2021Updated 5 years ago
- Experimental Reverse DNS Shell☆16Nov 26, 2025Updated 10 months ago
- A fast and efficient subdomain hijacking scanner that checks for takeover vulnerabilities by matching HTTP response bodies against predef…☆44Apr 12, 2026Updated 6 months ago
- A Undetected Version of Frida☆54Mar 19, 2026Updated 7 months ago
- Database kode dan nama kewilayah untuk Kemendagri update 2021☆11Dec 15, 2021Updated 4 years ago