NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.
☆17Sep 23, 2026Updated last month
Alternatives and similar repositories for NextForge
Users that are interested in NextForge are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Structured practice: Mainly PortSwigger lab writeups☆23Updated this week
- CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)☆13Aug 21, 2026Updated 2 months ago
- Next.js RCE☆52Sep 29, 2026Updated last month
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- ☆16Apr 12, 2026Updated 6 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- CVE-2026-109618/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)☆60Oct 22, 2026Updated last week
- PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with…☆43Sep 22, 2026Updated last month
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated last month
- A Burp Suite extension that converts IP addresses to decimal notation, useful for SSRF bypass and WAF evasion testing. Created by Harshad…☆13Dec 9, 2024Updated last year
- Blind XSS SVG☆10Mar 27, 2023Updated 3 years ago
- ☆39Oct 21, 2026Updated last week
- Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)☆20Aug 7, 2026Updated 2 months ago
- ☆15Feb 6, 2025Updated last year
- Stealth hybrid URL mapper☆56Oct 21, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image☆63Oct 19, 2026Updated last week
- WordPress Plugin WP Statistics 13.0.7 - Time-Based Blind SQL Injection (Unauthenticated)☆13May 31, 2021Updated 5 years ago
- ☆22Sep 28, 2026Updated last month
- A lightweight Linux desktop extension for managing V2Ray proxy connections with ease.☆22Oct 20, 2026Updated last week
- Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM☆34Oct 20, 2026Updated last week
- CVE-2026-48909 PoC☆24Jul 7, 2026Updated 3 months ago
- This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.☆21Oct 15, 2026Updated 2 weeks ago
- Reversing Vulnerabilities for Fun☆17Updated this week
- JaelesFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆22May 1, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Contains nuclei templates for security testing and POCs.☆17Oct 19, 2024Updated 2 years ago
- PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp☆22Aug 9, 2026Updated 2 months ago
- Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when a…☆64Oct 6, 2026Updated 3 weeks ago
- A curated list of awesome swiss army knife libraries and projects.☆11Aug 12, 2020Updated 6 years ago
- ☆13Aug 29, 2025Updated last year
- CVE-2026-41940 latest cPanel & WHM 0day - 70 million websites are possible to expose by Chirag Artani☆26Apr 29, 2026Updated 6 months ago
- Passively check for XSS character encodings☆20Mar 9, 2026Updated 7 months ago
- NetScan CLI is a command-line tool for retrieving and analyzing IP address information. It provides detailed subnet and organization data…☆62Sep 4, 2024Updated 2 years ago
- request module that supports cloudflare anti ddos pages☆12Apr 3, 2022Updated 4 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ScriptCase Pre-Authenticated Remote Command Execution exploitation script (CVE-2025-47227, CVE-2025-47228).☆12May 14, 2025Updated last year
- SelfHosted - Bug Bounty Programs | Discover new and fresh bug bounty programs across platforms. Updated frequently to always display the …☆16Nov 24, 2025Updated 11 months ago
- This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution (RCE) vulnerabi…☆27Apr 27, 2025Updated last year
- Take a list of URIs and print all the of the paths☆10Sep 30, 2026Updated 3 weeks ago
- ☆52Oct 1, 2025Updated last year
- Autonomous OODA-loop pentesting agent. Hermes brain, Kali + Playwright tools over MCP, ATT&CK as the Orient language.☆40Updated this week
- Telegram CVE-2026-107181☆21Oct 10, 2026Updated 2 weeks ago