CVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorized security testing & research only.
☆120Oct 29, 2026Updated this week
Alternatives and similar repositories for vulnerability-poc
Users that are interested in vulnerability-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- test☆18Jul 13, 2026Updated 3 months ago
- 🧪 Collects CVE PoCs and backs them up to the Internet Archive when they are unavailable on GitHub.☆22Updated this week
- GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image☆63Oct 19, 2026Updated last week
- ☆14Jun 9, 2026Updated 4 months ago
- Offline decryptor for Synology Active Backup for Business — recovers the plaintext inventory credentials (ESXi, AD, MSQL, Oracle) stored …☆19Aug 19, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- 对JNDIbypass工具进行二次开发☆19Dec 25, 2024Updated last year
- ToShell 是一个轻量 C2 框架，由 服务端（Team Server）+ Web 控制台 + 多平台植入端 组成，覆盖「生成载荷 → 会话管理 → 任务执行」的完整链路。单二进制即可部署整套服务， 开箱即用。☆206Updated this week
- ☆25Jun 4, 2026Updated 4 months ago
- SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smu…☆56Oct 13, 2026Updated 2 weeks ago
- CVE-2026-75604 Next.js Windows RCE poc☆106Aug 28, 2026Updated 2 months ago
- nginx CVE scanner + RCE exploit framework (CVE-2026-42945 + 16 others)☆27Sep 26, 2026Updated last month
- CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH☆145Jul 7, 2026Updated 3 months ago
- 渗透测试实战工作流 skill for Claude Code - 5阶段方法论/19类攻击playbook/2887份H1真实案例/国产组件指纹库☆39Sep 14, 2026Updated last month
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- AI一键免杀WebShell，包含金刚狼、哥斯拉、冰蝎、菜刀等☆29Jun 7, 2026Updated 4 months ago
- A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free…☆21Sep 18, 2026Updated last month
- For V8CTF M122☆14Aug 25, 2024Updated 2 years ago
- DBX 数据审计版☆50Updated this week
- ☆11Apr 8, 2024Updated 2 years ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆70Oct 18, 2026Updated last week
- Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed expos…☆36Updated this week
- ☆48Apr 28, 2026Updated 6 months ago
- Exploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabil…☆97Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- QL-Relax☆13Aug 12, 2025Updated last year
- Unauthenticated RCE PoC for exposed DeepSeek Harness (dsh) web instances.☆57Aug 22, 2026Updated 2 months ago
- Tool for CVE-2022-1388☆12May 13, 2022Updated 4 years ago
- Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONT…☆52Oct 22, 2026Updated last week
- 哥斯拉webshell管理工具二开☆417Sep 16, 2026Updated last month
- Gathery 是一款基于 PyQt5 开发的网络安全信息收集与分析工具，集成了多种实用的信息收集功能和小工具，帮助安全研究人员、渗透测试人员和网络管理员快速收集目标信息☆19Jun 22, 2025Updated last year
- VulnWatchdog 是一个自动化的漏洞监控和分析工具。它可以监控 GitHub 上的 CVE 相关仓库,获取漏洞信息和 POC 代码,并使用 GPT 进行智能分析,生成详细的分析报告。☆116Updated this week
- 从美国国家漏洞库NVD获取某个特定版本软件的漏洞统计信息。☆16Mar 29, 2022Updated 4 years ago
- Working exploit (PoC) for CVE-2025-59287 — WSUS vulnerability. Featured on Vulners and DeepWiki.☆16Oct 25, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Windows绕过EDR实现DumpHash☆266Jul 30, 2026Updated 2 months ago
- Next.js RCE☆52Sep 29, 2026Updated last month
- MongoDB 内存泄露漏洞 (CVE-2025-14847) 检测工具☆15Dec 26, 2025Updated 10 months ago
- my exp for CVE-2020-27194, tested on linux kernel 5.8.14.☆14Feb 3, 2021Updated 5 years ago
- CVE-2026-53361 AF_UNIX GC vs MSG_PEEK use-after-free container escape☆26Aug 11, 2026Updated 2 months ago
- HAPPY JS 是一款面向 Web 安全测试与 JS 逆向工程的综合型浏览器扩展，融合了 **FindSomething（敏感信息扫描）**、**SnowEyes（指纹/资源发现）**、**AntiDebug_Breaker（反调试与 API Hook）** 三类项目的核…☆51Sep 16, 2026Updated last month
- POC pre-auth RCE on Exchange☆191Aug 22, 2026Updated 2 months ago