A comprehensive WordPress vulnerability scanner and exploitation framework for authorized penetration testing. This tool automatically detects and exploits multiple WordPress security vulnerabilities (CVEs) to help security professionals identify and patch weaknesses.
☆104Nov 2, 2026Updated last week
Alternatives and similar repositories for Mephisto
Users that are interested in Mephisto are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Beelzebub all in one Hacking Tools, Shell finder, Zone-H Grabber, ReverseIP, SMTP Finder, XMLRPC BF and more☆61May 27, 2025Updated last year
- Full and complete RCE exploit for Magento Polyshell☆30Apr 9, 2026Updated 7 months ago
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 3 months ago
- ☆16Jun 14, 2026Updated 5 months ago
- CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfi…☆16Jul 29, 2026Updated 3 months ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- WordPress XML-RPC & WP-Login Bruteforce + Auto Uploader Powerful asynchronous bruteforce tool for WordPress sites via wp-login.php and …☆27Apr 22, 2025Updated last year
- Tool to bypass 40X response codes.☆48Sep 18, 2022Updated 4 years ago
- The WebHawk Framework is a tool used for authorized enumeration and exploitation of webservers.☆45Oct 10, 2026Updated last month
- cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security☆36Jul 24, 2026Updated 3 months ago
- Bash script to spray known credentials against multiple services with netexec, inspired by nxcspray and nxc-sweep☆13Sep 2, 2026Updated 2 months ago
- A modern HTTP and HTTPS interception proxy with custom-made extensions support.☆133Jun 17, 2026Updated 4 months ago
- A next-generation PHP web shell designed for maximum stealth and power: real-time terminal, auto-kernel exploits, Windows admin bypass, s…☆20Nov 6, 2026Updated last week
- SSRFHunter☆18Jan 17, 2026Updated 9 months ago
- ☆14Jul 18, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, …☆184May 12, 2026Updated 6 months ago
- Rust attack-path analysis for AD, ADCS and Entra ID☆48Updated this week
- CVE-2025-55182-bypass-waf☆30Jan 8, 2026Updated 10 months ago
- FortiSandbox RCE Scanner — CVE-2026-39808☆26Apr 21, 2026Updated 6 months ago
- ⚔️ Slays exposed .git repos even when /.git/ returns 403. Dumps config, HEAD, logs, index and full history over HTTP, rebuilding the sour…☆14Sep 21, 2026Updated last month
- My Main App Hacking CheckList☆35Jun 20, 2026Updated 4 months ago
- Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)☆20Aug 7, 2026Updated 3 months ago
- OSINT and infrastructure analysis tool leveraging AI GPT and multiple APIs to gather intelligence about domains, certificates, and web as…☆19Jun 8, 2026Updated 5 months ago
- Kali Linux Polyglot Framework for Autonomous Pentesting/Cyber Security☆142Aug 16, 2026Updated 2 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆17Oct 2, 2026Updated last month
- Grafana scanner with all public CVEs that I collected in one script to make grafana testing easier☆242Sep 11, 2026Updated 2 months ago
- A local wordlist intelligence and workflow management tool for offensive security & Bug Bounty workflows.☆15May 30, 2026Updated 5 months ago
- Export to GBounty is a Burp Suite extension that enables users to export selected HTTP requests from Burp Suite into a compressed ZIP fil…☆11Oct 9, 2024Updated 2 years ago
- NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF☆77May 15, 2026Updated 5 months ago
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- A monitoring platform for dark web sites and onions that can be flexibly configured to monitor any onion site.☆44Mar 16, 2026Updated 7 months ago
- A tool that helps you find the real IP addresses hiding behind Cloudflare.☆656Jul 6, 2026Updated 4 months ago
- Domain Grabber Made With Love :3☆16May 3, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- BurnWP Advanced Exploiter System instead Scanner & Custom Plugin for Pentester☆95Oct 5, 2025Updated last year
- xnew is a fast, low-memory CLI that appends only unique lines to files. Built in Go for large datasets, it streams input efficiently and …☆30May 23, 2026Updated 5 months ago
- A shellcode loader generator with support for multiple injection techniques, built for red team engagements.☆105Jul 1, 2026Updated 4 months ago
- Tool to assist bug bounty hunters☆79Mar 23, 2026Updated 7 months ago
- ClickFix / Fake Captcha Builder (GUI) with powershell payload - Dual Mode Social Engineering Toolkit☆27Apr 4, 2026Updated 7 months ago
- ☆37May 5, 2026Updated 6 months ago
- Passive leak enumeration tool.☆610Nov 1, 2026Updated last week
Are these results useful?