☆109Sep 14, 2026Updated last week
Alternatives and similar repositories for write-ups
Users that are interested in write-ups are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- IoT Firmware Deep Analysis: Automated reverse engineering and vulnerability discovery for IoT firmware binaries.☆67Updated this week
- another PrivEsc potato...☆112Sep 5, 2026Updated 2 weeks ago
- This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made …☆65Jun 15, 2026Updated 3 months ago
- poc for cve-2025-53772☆45Dec 10, 2025Updated 9 months ago
- JS Enumeration & SAST☆26Sep 16, 2026Updated last week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A TSR application that allows for sending "push notifications" to MS-DOS!☆16Sep 29, 2021Updated 4 years ago
- A Chrome extension that watches your HackerOne reports and alerts you when their status changes. Its main reason to exist is internal act…☆15Jul 3, 2026Updated 2 months ago
- Tool that will request the public disclosures on a specific HackerOne program and show them in a localhost webserver.☆65Feb 26, 2019Updated 7 years ago
- A template for building your own AI/LLM harness☆98Jul 30, 2026Updated last month
- ☆13Mar 27, 2021Updated 5 years ago
- It contain google dork to find the wsdl file.☆13May 27, 2020Updated 6 years ago
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 2 months ago
- HTML5 WebSocket message fuzzer☆146Nov 23, 2018Updated 7 years ago
- A curated collection of my security research and bug bounty writeups, documenting real-world vulnerabilities, exploitation methods☆27Jul 15, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ScrapeAW is a framework that without API scrape IPs across the world using Shodan☆11May 16, 2024Updated 2 years ago
- A Collection of Proof of Concepts for non-published Web Exploits and Common CVEs☆10Nov 29, 2020Updated 5 years ago
- Android security tool that scans installed apps bytecode to discover content providers, file providers, and intent interfaces, then gener…☆20Mar 12, 2026Updated 6 months ago
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 2 months ago
- A malicious LDAP server for JNDI injection attacks☆75Nov 15, 2024Updated last year
- Here's an updated Google Dorking list for 2025 Bug Bounty Hunting, incorporating new patterns and, the latest trends.☆20Apr 26, 2025Updated last year
- CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH☆140Jul 7, 2026Updated 2 months ago
- Stock vulnerable wordpress RCE poc for wp2shell.☆108Jul 18, 2026Updated 2 months ago
- WebKit NavigateEvent.canIntercept SOP bypass via cross-port interception — iOS 26.3.1 BSI (CVE-2026-20643)☆21Jun 28, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A training course on Web Security, Exploit Development and Source Code Auditing from 2009.☆12Feb 15, 2022Updated 4 years ago
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,280Sep 1, 2026Updated 3 weeks ago
- Case for CVE-2022-30778☆22Aug 23, 2022Updated 4 years ago
- ☆46Sep 10, 2020Updated 6 years ago
- High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential v…☆705Updated this week
- A tool for detecting subdomain takeover vulnerabilities by checking DNS records☆34May 28, 2026Updated 3 months ago
- ☆12Aug 24, 2025Updated last year
- may the poc with you☆16May 6, 2022Updated 4 years ago
- Merge results from NMAP and Masscan into one CSV file☆18Jun 19, 2018Updated 8 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 7 months ago
- Multi-plugin marketplace for Claude Code offensive security plugins☆20Mar 22, 2026Updated 6 months ago
- All the content from my Troopers 19 talk☆10Mar 20, 2019Updated 7 years ago
- Grammar-based HTTP/1 fuzzer with mutation ability☆264Oct 30, 2024Updated last year
- Vite Arbitrary File Read Exploit☆15Jun 25, 2025Updated last year
- ☆564Mar 27, 2025Updated last year
- Simple rust fuzzer☆23Mar 17, 2021Updated 5 years ago