A comprehensive WordPress vulnerability scanner and exploitation framework for authorized penetration testing. This tool automatically detects and exploits multiple WordPress security vulnerabilities (CVEs) to help security professionals identify and patch weaknesses.
☆103May 21, 2026Updated 5 months ago
Alternatives and similar repositories for Mephisto
Users that are interested in Mephisto are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Full and complete RCE exploit for Magento Polyshell☆30Apr 9, 2026Updated 6 months ago
- cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security☆35Jul 24, 2026Updated 3 months ago
- Beelzebub all in one Hacking Tools, Shell finder, Zone-H Grabber, ReverseIP, SMTP Finder, XMLRPC BF and more☆60May 27, 2025Updated last year
- CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfi…☆16Jul 29, 2026Updated 2 months ago
- ☆16Jun 14, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Tool to bypass 40X response codes.☆48Sep 18, 2022Updated 4 years ago
- WordPress XML-RPC & WP-Login Bruteforce + Auto Uploader Powerful asynchronous bruteforce tool for WordPress sites via wp-login.php and …☆26Apr 22, 2025Updated last year
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 3 months ago
- Non-destructive scanner for CVE-2026-109618 / CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabb…☆107Updated this week
- The WebHawk Framework is a tool used for authorized enumeration and exploitation of webservers.☆42Oct 10, 2026Updated 2 weeks ago
- SSRFHunter☆18Jan 17, 2026Updated 9 months ago
- Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, …☆184May 12, 2026Updated 5 months ago
- A monitoring platform for dark web sites and onions that can be flexibly configured to monitor any onion site.☆43Mar 16, 2026Updated 7 months ago
- OSINT and infrastructure analysis tool leveraging AI GPT and multiple APIs to gather intelligence about domains, certificates, and web as…☆19Jun 8, 2026Updated 4 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ClickFix / Fake Captcha Builder (GUI) with powershell payload - Dual Mode Social Engineering Toolkit☆25Apr 4, 2026Updated 6 months ago
- CVE-2025-55182-bypass-waf☆30Jan 8, 2026Updated 9 months ago
- Find and assess exposed Google Gemini API keys across web assets and Android apps.☆128Updated this week
- FortiSandbox RCE Scanner — CVE-2026-39808☆27Apr 21, 2026Updated 6 months ago
- My Main App Hacking CheckList☆34Jun 20, 2026Updated 4 months ago
- Apkx-Hunter is an Android Static Analysis Framework in Debian Package written entirely in C with OWASP MASVS scanning with 15 categories …☆105Oct 13, 2026Updated last week
- A modern HTTP and HTTPS interception proxy with custom-made extensions support.☆130Jun 17, 2026Updated 4 months ago
- Kali Linux Polyglot Framework for Autonomous Pentesting/Cyber Security☆140Aug 16, 2026Updated 2 months ago
- Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier☆242Sep 11, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Export to GBounty is a Burp Suite extension that enables users to export selected HTTP requests from Burp Suite into a compressed ZIP fil…☆11Oct 9, 2024Updated 2 years ago
- A shellcode loader generator with support for multiple injection techniques, built for red team engagements.☆103Jul 1, 2026Updated 3 months ago
- NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF☆77May 15, 2026Updated 5 months ago
- Burp Suite extension + port-based highlighter: dedupes HTTP history into a live unique-request feed and color-codes attacker/victim traff…☆14Aug 14, 2026Updated 2 months ago
- A tool that helps you find the real IP addresses hiding behind Cloudflare.☆651Jul 6, 2026Updated 3 months ago
- Static config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture…☆32Jul 20, 2026Updated 3 months ago
- ☆34Jun 18, 2026Updated 4 months ago
- Stealth hybrid URL mapper☆55Updated this week
- ☆13Mar 12, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Tool to assist bug bounty hunters☆79Mar 23, 2026Updated 7 months ago
- A simple recon pipeline☆40Sep 24, 2026Updated last month
- Passive leak enumeration tool.☆601Oct 9, 2026Updated 2 weeks ago
- xnew is a fast, low-memory CLI that appends only unique lines to files. Built in Go for large datasets, it streams input efficiently and …☆30May 23, 2026Updated 5 months ago
- This tool is designed for systematic investigation and analysis of Twitter accounts and activities through legitimate open-source intelli…☆12Sep 27, 2025Updated last year
- CVE-2026-21643☆18Mar 28, 2026Updated 6 months ago
- Nuclei templates which I wrote myself☆10Jan 8, 2022Updated 4 years ago