cve-2019-9081

cve-2019-9081 exp payload 생성 payload를 매개변수에 전달하면 됩니다...

CVE-2023-21707

CVE-2023-21707 Exchange 逆シリアル化ペイロード生成 root@kitploit: .\ConsoleApp1.exe "calc"...

api_wordlist

apiwordlist 用于对 Web 应用程序 API 进行模糊测试的 API 名称字典。 目录 apiseeninwild.txt - 包含我在实际环境中见过的 API 函数名称。 actions.txt - 所有 API 函数名称动词 objects.txt - 所有 API 函数名称名词 actions-uppercase.txt - 首字母大写的 API 函数名称动词 actions-lowercase.txt - 首字母小写的 API 函数名称动词 objects-uppercase.txt - 首字母大写的 API 函数名称名词 objects-lowercase.txt ...

Text4ShellPayloads

Text4ShellPayloads このプロジェクトには、CVE-2022-42889の脆弱性を悪用した悪意のあるコマンドを生成するPythonスクリプトが含まれています 脆弱なサーバーは、「Karthik U J」のガイダンスに従い、https://github.com/karthikuj/cve-2022-42889-text4shell-docker の手順に沿ってセットアップされています...

SecureForce

SecureForce - 침투 테스트 프레임워크 승인된 보안 테스트 및 경쟁 분석을 위해 구축된 단순하지만 강력한 침투 테스트 프레임워크입니다. SecureForce는 익스플로잇 관리, 페이로드 생성 및 통제된 공격 실행을 위한 직관적인 인터페이스를 제공합니다. 기능 익스플로잇 라이브러리 : 다양한 취약점에 대한 체계적인 익스플로잇 모듈 페이로드 생성 : 다중 형식 페이로드 생성 셸코드, 리버스 셸 등 대화형 콘솔 : 공격 오케스트레이션을 위한 명령 기반 인터페이스 모듈형 아키텍처 : 사용자 정의 익스플로잇 및 페이로드로 쉽게...

SpringPeace

SpringPeace SpringPeace là GUI/CLI GPL-3.0-or-later để tạo payload candidate từ Android boot.img cho CVE-2026-43499. Ứng dụng Windows dùng giao diện SpringPeace, tự kiểm tra ADB, đọc boot.img, build các candidate payload.so, rồi thử qua ADB theo thứ tự manifest. SpringPeace is a GPL-3.0-or-later...

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization...

SpringPeace

SpringPeace SpringPeace ist eine GUI/CLI unter GPL-3.0-or-later zur Erstellung von Payload-Kandidaten aus Android boot.img für CVE-2026-43499. Die Windows-App prüft ADB, liest boot.img, erstellt payload.so-Kandidaten und testet sie über ADB in Manifest-Reihenfolge. SpringPeace ist eine GUI/CLI...

sqlicat

sqlicat Framework de SQL Injection em Python puro stdlib...

exploit-development-framework

Exploit Development Framework EDF A modular, educational ex...

AI-for-fastjson-1.2.83-RCE-skill

fastjson-1.2.83-RCEskill AI agent skill for detecting and exp...

Exploit for Code Injection in Exiftool_Project Exiftool

CVE-2021-22204 - ExifTool Arbitrary Code Execution An upgrade...

📄 HTTP/2 Multi-Server HPACK Exhaustion

This code implements a multi-target HTTP/2 resource exhaustion framework designed to stress or overwhelm server implementations through protocol-level amplification techniques. It includes server-specific payload generation for multiple platforms, automated connection orchestration, stream scalin...

Data Agents under Attack: Vulnerabilities in LLM-Driven Analytical Systems

Data agents integrate LLM-driven reasoning with relational data access, executable analytical tools, and multi-step workflow orchestration, making them increasingly central to enterprise analytics. This integration introduces new security vulnerabilities across data resources, database execution,...

Exploit for CVE-2025-66478

CVE-2025-66478-Research-Proof-of-Concept Overview This re...

The Infinite Mutation Engine? Measuring Polymorphism in LLM-Generated Offensive Code

Malware authors have traditionally relied on polymorphic techniques to produce variants in the same malware family, complicating signature-based detection. Integrating generative AI into offensive toolchains enables attackers to synthesize structurally diverse payloads with identical behavior,...

Exploit for Deserialization of Untrusted Data in Facebook React

markdown Summary CVE-2025-55182 Scanner is a high-perfor...

lightweight-msf

Lightweight-MSF !License: MIThttps://img.shields.io/badge...

linux-security-tools

Linux Security Tools Linux security tools, scanners, crackers...

📄 Jinja 2 1.4.0 Tactical RMM SSTI Detection

This proof of concept script detects potential server-side template injection vulnerabilities in web applications using template engines such as Jinja. The script sends a dynamically generated mathematical expression within a template payload to a target URL parameter. If the server evaluates the...