Repo for all my exploits/PoCs
☆53May 6, 2025Updated last year
Alternatives and similar repositories for exploits
Users that are interested in exploits are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Proof of Concept Exploit for CVE-2024-9465☆31Oct 9, 2024Updated last year
- ☆16Apr 17, 2025Updated last year
- Will attempt to retrieve DB details for FastAdmin instances☆68Aug 20, 2024Updated last year
- Gouge is a simple Burp extension to extract or gouge all URLs which are seen in JS files as you visit different websites/webpages in Burp…☆30Jul 21, 2024Updated 2 years ago
- POC for CVE-2024-40348. Will attempt to read /etc/passwd from target☆31Jul 21, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- PoCs of RCEs against open source C2 servers☆94Sep 28, 2024Updated last year
- TeamViewer User to Kernel Elevation of Privilege PoC. CVE-2024-7479 and CVE-2024-7481. ZDI-24-1289 and ZDI-24-1290. TV-2024-1006.☆137Dec 22, 2024Updated last year
- Looks for parameters in urls☆35Oct 14, 2024Updated last year
- Advanced test for proxy & waf☆14Feb 10, 2026Updated 6 months ago
- A cheatsheet of tools and commands that I use to pentest Active Directory.☆55Mar 26, 2022Updated 4 years ago
- فایل ها و فیلم های ورکشاپ ردتیم 2024 با هانت لرن☆34Sep 15, 2024Updated last year
- ☆12Aug 29, 2024Updated last year
- ☆32Jun 1, 2024Updated 2 years ago
- REC2 (Rusty External Command and Control) is client and server tool allowing auditor to execute command from VirusTotal and Mastodon APIs…☆162Feb 22, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A tool for searching common variations of a human name☆53Jun 25, 2026Updated last month
- EDR & Antivirus Bypass to Gain Shell Access☆247Sep 30, 2024Updated last year
- CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability☆147Jan 13, 2025Updated last year
- CVE-2024-30090 - LPE PoC☆107Oct 17, 2024Updated last year
- Exploit for the vulnerability CVE-2024-43044 in Jenkins☆186Oct 2, 2024Updated last year
- Apache HugeGraph Server Unauthenticated RCE - CVE-2024-27348 Proof of concept Exploit☆19Jun 3, 2024Updated 2 years ago
- pdf exploit 集成☆248Jul 19, 2024Updated 2 years ago
- CVE-2024-41570: Havoc C2 0.7 Teamserver SSRF exploit☆76Sep 11, 2024Updated last year
- A simple application that shows how to exploit the CVE-2022-42889 vulnerability☆11Nov 6, 2022Updated 3 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- BlackHat Asia 2025 code and presentations☆17Apr 13, 2025Updated last year
- Cobalt Strike notifications via NTFY.☆15Sep 24, 2024Updated last year
- A C2 framework inspired by anime, made in python.☆12Feb 8, 2026Updated 6 months ago
- Online-Crawler-Wayback-Machine☆27Oct 15, 2024Updated last year
- PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges requir…☆155Jun 10, 2024Updated 2 years ago
- ICMPWatch: ICMP Packet Sniffer☆60Oct 15, 2024Updated last year
- Abusing Azure services over C2☆380Jan 20, 2026Updated 6 months ago
- ☆15Jul 30, 2024Updated 2 years ago
- A suite of tools to disrupt campaigns using the Sliver C2 framework.☆285Aug 5, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Generate AES128 and AES256 Kerberos keys from a given username, password, and realm☆18Sep 18, 2024Updated last year
- ☆13Apr 14, 2024Updated 2 years ago
- Tool to aid in dumping LSASS process remotely☆44Sep 23, 2025Updated 10 months ago
- POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file.☆127Jul 12, 2024Updated 2 years ago
- WhatAboutSAM is my custom PoC of a Windows SAM dumper☆37Jul 4, 2026Updated last month
- 蜜罐检测工具，支持自动化URL去重、多线程控制及智能速率限制。可识别伪装服务。☆16Jun 5, 2025Updated last year
- DockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more.☆247Jul 31, 2024Updated 2 years ago