698 matches found
Exploit for CVE-2026-64638
CVE-2026-64638 – XSS2Shell: WordPress login page pre-authentic...
Exploit for CVE-2026-64638
XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/s...
Exploit for CVE-2026-71557
CVE-2026-71557: Go-Git path traversal PoC English versionR...
Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware
AVERTISSEMENT ÉTHIQUE - LECTURE OBLIGATOIRE Ce docume...
offensive-security-labs
Offensive Security Labs A collection of hands-on offensive cy...
onyx-agent
Onyx Agent v68 Multi-LLM agent framework for security testing...
cam-hunter
📡 CAM HUNTER — Advanced DVR / NVR / XVR Security Testing Frame...
CVE-2026-50558
Penelope Shell Handler is a post-exploitation shell handler for authorized security testing. Prior to 0.20.0, the Unix download implementation in penelope.py used tar.extractalllocaldownloadfolder on tar archives returned by remote sessions without validating member paths, allowing a malicious or...
CVE-2026-50558 Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
Penelope Shell Handler is a post-exploitation shell handler for authorized security testing. Prior to 0.20.0, the Unix download implementation in penelope.py used tar.extractalllocaldownloadfolder on tar archives returned by remote sessions without validating member paths, allowing a malicious or...
Exploit for CVE-2026-63030
WP2Shell Detector and Validation PoC !License: MIThttps:/...
FLOCK_CVE_SCANNER
FLOCKCVESCANNER Scan and exploit with permission Ov...
Exploit for Insecure Default Initialization of Resource in Apache Solr
CVE-2026-44825 Apache Solr Scanner This repository contains a...
The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API
Part 2: How the Red Agent bypassed backend resolvers to expose an entire airline booking database in fifteen minutes...
ITScape
🛡️ ITScape - Test your systems for security gaps !https:/...
Can Open-Source LLM Agents Replace Static Application Security Testing Tools? an Empirical Assessment
This paper explores the value of agentic AI tools for cybersecurity purposes. We evaluate the efficacy of a general-purpose GenAI Large Language Model- GenAI- based agent when powered by three different Ollama-hosted general-purpose open source models. We assess each agent's performance using...
Windows Notepad WebDAV UNC Reference Markdown File Generator
This Metasploit auxiliary module is a file-format generation tool intended for security testing of a CVE-2026-20841 related to Windows Notepad Markdown handling. It produces a Markdown file containing a UNC WebDAV-style path embedded as a clickable link for behavioral analysis...
glitchtip-dns-rebinding-gap-poc
GlitchTip DNS rebinding gap PoC This PoC models the DNS rebin...
📄 MCPJam Inspector 1.4.2 Command Injection
This is an advanced Python proof of concept for CVE-2026-23744 demonstrating command injection through a vulnerable MCP API endpoint, leading to remote code execution and reverse shell access. The script supports multiple payload types, endpoint discovery, listener management, and several...