Exploit for Improper Input Validation in Boa Boa_Webserver

BOA Router Exploit Framework !Python Versionhttps://img...

Exploit for CVE-2023-39848

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...

OpenClaw

🦞 Moltbot/Clawdbot 1-Click RCE PoC A simplified, single-scrip...

WiFiPenTester: Advancing Wireless Ethical Hacking with Governed GenAI

Wireless ethical hacking relies heavily on skilled practitioners manually interpreting reconnaissance results and executing complex, time-sensitive sequences of commands to identify vulnerable targets, capture authentication handshakes, and assess password resilience; a process that is inherently...

📄 Oracle E-Business Suite 12.2.3 Request Smuggling

This script is a refined proof of concept targeting Oracle E‑Business Suite EBS vulnerability CVE‑2025‑61882. It corrects logical flaws in request smuggling payload construction, particularly around request termination and CRLF preservation, ensuring reliable proxy/backend desynchronization. The...

Exploit for CVE-2026-24134

CVE-2026-24134-PoC Overview This repository contains the...

Exploit for Argument Injection in Gnu Inetutils

Telnetd Auth Bypass Scanner CVE-2026-24061 A Python-based s...

XAMPP and PHPMyAdmin Web Security Research Playbook

This is a comprehensive security testing guide for XAMPP services. It follows a structured approach: 1 Reconnaissance and Information Gathering, 2 Initial Access Attempts, 3 Post-Authentication Exploitation. Each scenario includes realistic commands and expected outcomes for professional security...

Exploit for SQL Injection in Agentejo Cockpit

Synthetic Test Case: CVE-2020-35846 CWE: CWE-89 Origi...

Exploit for SQL Injection in Dolibarr

Synthetic Test Case: CVE-2018-10094 CWE: CWE-89 Origi...

SploitGPT

🤖 SploitGPT - Your Penetration Testing Companion 🚀 Getting...

Unicornscan 0.4.43

Unicornscan is an information gathering and correlation engine built for and by members of the security research and testing communities. It was designed to provide an engine that is Scalable, Accurate, Flexible, and Efficient. It is released for the community to use under the terms of the GPL...

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

MongoBleed-Pro ☠️ Advanced MongoDB Memory L...

V-APF

V-APF 是一款机器学习驱动的自动化 Web 安全检测框架。通过对 Web 页面在“基线请求 vs. 探测请求”间的语义指纹差异进行量化，结合随机森林 Random Forest模型，自动识别 SQLi / XSS 等漏洞并生成报告。...

PoC-Apisix

PoC-Apisix RCE via serverless-pre-function plugin when Admi...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React2Shell - Proof of Concept ⚠️ SECURIT...

Exploit for Deserialization of Untrusted Data in Facebook React

🔍 Next.js Security Testing Tool Professiona...

Exploit for Deserialization of Untrusted Data in Facebook React

🔍 Next.js Security Testing Tool Professiona...

Exploit for Deserialization of Untrusted Data in Facebook React

🔍 Next.js Security Testing Tool Professiona...

OreaHax-Framework

OreaHax-Framework ╔════════════════════════════════════...