Windfall - Unauthenticated RCE exploit chain for Windmill & Nextcloud Flow (CVE-2026-29059). Path traversal + credential leak + PostgreSQL heap dump + Nextcloud AppAPI takeover.
☆18Apr 7, 2026Updated 6 months ago
Alternatives and similar repositories for Windfall
Users that are interested in Windfall are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A container/VM malware that finds and exploits SSRF opportunities in a compromised cloud environment☆10Apr 10, 2022Updated 4 years ago
- A blue team tool to help audit kerberoasting vulnerability status☆23Jan 31, 2026Updated 9 months ago
- SC Audit Studio, also known as Smart Contract Audit Studio, is a powerful tool that serves as an all-in-one Integrated Development Enviro…☆11May 30, 2023Updated 3 years ago
- Auto Web Vulnerability Scanning Framework☆11Feb 3, 2016Updated 10 years ago
- ⚡ Golang library for quick make pentest tools☆16Apr 7, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Everything about xss protection technology☆15Oct 22, 2019Updated 7 years ago
- Active Directory enumeration and attack framework written in Go, NetExec-inspired, Manticore-powered, single binary.☆14Oct 1, 2026Updated last month
- Manual extremo de hacking ético: técnicas, exploits y estrategias reales para pentesters, con enfoque práctico y visión profesional.☆11Aug 17, 2025Updated last year
- CVE-2026-32475 The Elementor Pro Forms File Upload field handles validation and file processing in two separate loops with different han…☆13Aug 21, 2026Updated 2 months ago
- Read PostgreSQL data files without credentials - forensics, data recovery, and security research tool☆50Apr 14, 2026Updated 6 months ago
- AI-Powered Wordlist Generator & Target Recon Tool - Replaces CeWL + CUPP + trufflehog in a single Go binary☆14Oct 15, 2026Updated 2 weeks ago
- Ivanti Pulse Secure CVE-2023-46805 Scanner - Based on Assetnote's Research☆14Jan 19, 2024Updated 2 years ago
- Active Directory data collector for BloodHound written in Bash💲🐺☆14Feb 17, 2026Updated 8 months ago
- ☆17Aug 8, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Automation Hacking & Penetration Testing Suite☆12Aug 12, 2016Updated 10 years ago
- A super dope tool, that generates "corrupted" .PDF files of randomly unique file sizes (no two files of the same size or byte combination…☆15Oct 12, 2021Updated 5 years ago
- CTF presentation☆14Jun 20, 2026Updated 4 months ago
- Exploit for the unauthenticated file upload vulnerability in WordPress's Royal Elementor Addons and Templates plugin (< 1.3.79). CVE-ID: …☆10Nov 2, 2023Updated 2 years ago
- SWF Vulnerability & Information Scanner☆19Nov 24, 2018Updated 7 years ago
- 🩸 Modular honeypot for pentesting training. Simulates SSH, FTP, HTTP, Telnet, SMB, MySQL & RDP. Real-time attack detection & web dashboa…☆17Oct 23, 2026Updated last week
- A daily PDF planner generator that includes iCal calendar events, optimized for Remarkable Paper Pro Move☆16Oct 24, 2025Updated last year
- ☆15Mar 27, 2026Updated 7 months ago
- ☆11Mar 18, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Simple and efficient file shredding☆13Sep 23, 2019Updated 7 years ago
- CATANA - CUT your Wordlist!☆17Oct 2, 2022Updated 4 years ago
- MajorDoMo Unauthenticated RCE: Deep Dive & Exploitation Techniques☆15Dec 18, 2023Updated 2 years ago
- D-Link NAS CVE-2024-3273 Exploit Tool☆100Apr 7, 2024Updated 2 years ago
- Yelix is a powerful web server framework built specifically for Deno, leveraging the Hono in the background. It simplifies backend develo…☆11May 1, 2025Updated last year
- PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE☆16Jun 11, 2026Updated 4 months ago
- Encrypted command‑and‑control (C2) research framework for cybersecurity education, red team labs, and secure client‑server communication …☆32Mar 15, 2026Updated 7 months ago
- ☆20Apr 28, 2025Updated last year
- Scraping LegiFrance naturalisation decrees for fun and OSINT profit☆12May 27, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Async Web Server for ESP8266 and ESP32☆15Jul 14, 2023Updated 3 years ago
- In-memory BOF implementation of Silent Process Exit LSASS dump via RtlReportSilentProcessExit☆19Apr 14, 2026Updated 6 months ago
- A collection of awesome one-liner scripts especially for bug bounty tips.☆16Sep 8, 2020Updated 6 years ago
- Hides in your attic... I mean process☆26Apr 29, 2026Updated 6 months ago
- ✪ Collection of Metasploit Modules ✪☆17Apr 17, 2026Updated 6 months ago
- CTF Workshop☆16Jun 20, 2026Updated 4 months ago
- Explore over 10,000 remote Web3 job opportunities on our platform, offering roles in blockchain, smart contracts, DeFi, NFTs, crypto, and…☆17Sep 25, 2024Updated 2 years ago