Automatic SQL injection and database takeover tool

Impacket is a collection of Python classes for working with network protocols.

SSRF (Server Side Request Forgery) testing resources

A simple tool for bypassing file upload restrictions.

Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.

CVE-2022-41040 - Server Side Request Forgery (SSRF) in Microsoft Exchange Server

This tool is designed to test for file upload and XXE vulnerabilities by poisoning XLSX files.

SpringFramework 远程代码执行漏洞CVE-2022-22965

Apache commons text - CVE-2022-42889 Text4Shell proof of concept exploit.

Juniper Firewalls CVE-2023-36845 - RCE

PoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication

CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit

HuntersEye is designed for Bug Bounty Hunters, and Security Researchers to monitor new subdomains and certificates for specified domains. The primary goal is to streamline and expedite the process …

Apache HugeGraph Server Unauthenticated RCE - CVE-2024-27348 Proof of concept Exploit

Exploit for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager

Bitbucket CVE-2022-36804 unauthenticated remote command execution