Repo for all my exploits/PoCs
☆52May 6, 2025Updated last year
Alternatives and similar repositories for exploits
Users that are interested in exploits are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Proof of Concept Exploit for CVE-2024-9465☆30Oct 9, 2024Updated 2 years ago
- Will attempt to retrieve DB details for FastAdmin instances☆66Aug 20, 2024Updated 2 years ago
- ☆16Apr 17, 2025Updated last year
- POC for CVE-2024-40348. Will attempt to read /etc/passwd from target☆31Jul 21, 2024Updated 2 years ago
- Advanced test for proxy & waf☆13Feb 10, 2026Updated 8 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Looks for parameters in urls☆35Oct 14, 2024Updated 2 years ago
- CVE-2024-24919 [Check Point Security Gateway Information Disclosure]☆31Jun 28, 2026Updated 4 months ago
- ☆32Jun 1, 2024Updated 2 years ago
- Gouge is a simple Burp extension to extract or gouge all URLs which are seen in JS files as you visit different websites/webpages in Burp…☆30Jul 21, 2024Updated 2 years ago
- CVE-2024-41570: Havoc C2 0.7 Teamserver SSRF exploit☆75Sep 11, 2024Updated 2 years ago
- TeamViewer User to Kernel Elevation of Privilege PoC. CVE-2024-7479 and CVE-2024-7481. ZDI-24-1289 and ZDI-24-1290. TV-2024-1006.☆136Dec 22, 2024Updated last year
- CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability☆147Jan 13, 2025Updated last year
- ☆12Aug 29, 2024Updated 2 years ago
- ☆61Dec 13, 2025Updated 10 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A rapid HTTP downgrade smuggling scanner written in Go.☆312May 16, 2024Updated 2 years ago
- POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.☆35Jul 4, 2024Updated 2 years ago
- 蜜罐检测工具，支持自动化URL去重、多线程控制及智能速率限制。可识别伪装服务。☆15Jun 5, 2025Updated last year
- DockerSpy searches for images on Docker Hub and extracts sensitive information such as authentication secrets, private keys, and more.☆248Jul 31, 2024Updated 2 years ago
- The tool that bypasses the firewall's Application Based Rules and lets you connect to anywhere, ANY IP, ANY PORT and ANY APPLICATION.☆62Aug 19, 2024Updated 2 years ago
- Atlassian Companion RCE Vulnerability Proof of Concept☆25Dec 15, 2023Updated 2 years ago
- ☆15Jul 30, 2024Updated 2 years ago
- Generate AES128 and AES256 Kerberos keys from a given username, password, and realm☆18Sep 18, 2024Updated 2 years ago
- A cheatsheet of tools and commands that I use to pentest Active Directory.☆55Mar 26, 2022Updated 4 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆13Apr 14, 2024Updated 2 years ago
- Proof-of-Concept for CVE-2024-21345☆78Apr 26, 2024Updated 2 years ago
- This repository contains scripts about ACL abuse and any other active directory attacking methods.☆36Aug 20, 2023Updated 3 years ago
- Nuclei template and information about the POC for CVE-2024-25600☆31Feb 21, 2024Updated 2 years ago
- GeoServer Remote Code Execution☆89Apr 6, 2025Updated last year
- This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".☆90Apr 11, 2023Updated 3 years ago
- REC2 (Rusty External Command and Control) is client and server tool allowing auditor to execute command from VirusTotal and Mastodon APIs…☆160Feb 22, 2024Updated 2 years ago
- BlackHat Asia 2025 code and presentations☆17Apr 13, 2025Updated last year
- Use current thread token to execute command☆15Jan 27, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Tool to aid in dumping LSASS process remotely☆43Sep 23, 2025Updated last year
- POC for CVE-2024-36991: This exploit will attempt to read Splunk /etc/passwd file.☆126Jul 12, 2024Updated 2 years ago
- A Volatility command reference mind map☆14Sep 20, 2018Updated 8 years ago
- Exploit for the vulnerability CVE-2024-43044 in Jenkins☆185Oct 2, 2024Updated 2 years ago
- Deploy a Private Burpsuite Collaborator using boto3 Python Library☆57Feb 20, 2020Updated 6 years ago
- Veeam Backup Enterprise Manager Authentication Bypass (CVE-2024-29849)☆90Jun 13, 2024Updated 2 years ago
- SAM Dumping in C#☆56Nov 27, 2025Updated 11 months ago