toothpicker

ToothPicker ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically targets iOS's Bluetooth daemon bluetoothd and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This...

CVE-2019-5736-POC

Breaking out of Docker via RunC A proof of concept code for CVE-2019-5736 This POC is heavily based on YuvalAvra's POC. I do not claim any credit for the code utilised in this POC. More information about this vulnerability and a demonstration of how it can be exploited can be found in the...

CVE-2025-48932---exploit

Invision Community SQL Injection Exploit CVE-2025-48932 A proof-of-concept exploit demonstrating a SQL injection vulnerability in Invision Community versions = 4.7.20. ⚠️ Disclaimer This tool is provided for educational and authorized security testing purposes ONLY. Unauthorized access to computer...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

██████╗ ██╗ ██╗██████╗ ██████╗ ███████╗██╗ ██╗███████╗██╗...

CVE-2025-13342

CVE-2025-13342 Frontend Admin by DynamiApps - ----/| |/ ----| \ ||/ / / / //// |// |/ ◈ Vulnerability Field| Detail ---|--- CVE ID| CVE-2025-13342 Score| 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CNA| Wordfence Affected| Frontend Admin by DynamiApps ≤ 3.28.20 Auth| None —...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with Alexcyberx 🔥 About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...

nextjs-security-scanner

日本語版は README.ja.md を参照してください。 nextjs-security-scanner Bash script to detect CVE-2025-55182 React2Shell and credential exposure in Next.js projects. Zero dependencies. CVE-2025-55182: React2Shell CVSS: 10.0 CRITICAL | CWE-502: Deserialization of Untrusted Data | SNORT SID: 65554 Unauthenticated...

web-hacking-playground

Web Hacking Playground Description Web Hacking Playground is a controlled web hacking environment. It consists of vulnerabilities found in real cases, both in pentests and in Bug Bounty programs. The objective is that users can practice with them, and learn to detect and exploit them. Other topic...

osTicketFileReadIntoRCE

CVE-2026-22200: osTicket Arbitrary File Read to RCE Full-chain exploit combining PHP filter chain injection with CVE-2024-2961 CNEXT for unauthenticated Remote Code Execution on vulnerable osTicket installations. Table of Contents Overview Vulnerability Details Attack Flow Features Installation...

CVE-2021-3156-Sudo-Buffer-Overflow-Linux

CVE-2021-3156 – Sudo Buffer Overflow Linux Baron Samedit Privilege Escalation Exploit 📌 Overview This project demonstrates the exploitation of CVE-2021-3156 Baron Samedit , a critical heap-based buffer overflow vulnerability in the Linux sudo utility. The vulnerability allows a low-privileged use...

cve-2018-7600-drupalgeddon2-lab

CVE-2018-7600 Drupalgeddon2 Vulnerability Lab Educational lab demonstrating exploitation of CVE-2018-7600 Drupalgeddon2 using a vulnerable Drupal 7.56 environment deployed with Docker. This project simulates a real-world vulnerability assessment workflow, including: Vulnerable environment setup...

webshell-analyzer

Web Shell Analyzer Web shell analyzer is a cross platform stand-alone binary built solely for the purpose of identifying, decoding, and tagging files that are suspected to be web shells. The web shell analyzer is the bigger brother to the web shell scanner project...

CVE-2021-44228-log4jVulnScanner-metasploit

CVE-2021-44228-log4jVulnScanner-metasploit open detection and scanning tool for discovering and fuzzing for Log4J RCE CVE-2021-44228 vulnerability preparation POC git clone https://github.com/TaroballzChen/CVE-2021-44228-log4jVulnScanner-metasploit cd CVE-2021-44228-log4jVulnScanner-metasploit...

CVE-2020-14179

CVE-2020-14179 Scanner Sample scan ./CVE-2020-14179.pl -u jira.atlassian.com OR ./CVE-2020-14179.pl -u https://jira.atlassian.com List scan ./CVE-2020-14179.pl -l list.txt Show Options ./CVE-2020-14179.pl How to install and use linux git clone https://github.com/c0brabaghdad1/CVE-2020-14179.git c...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — чекер уязвимости PHP2Shell Python 3 Python 3 по...

CVE-2025-49901

CVE-2025-49901 WordPress Simple Link Directory Plugin 14.8.1 is vulnerable to a high priority Broken Authentication ╔═══════════════════════════════════════════════════════════════════╗ ║ CVE-2025-49901 · Simple Link Directory · qc-opd ║ ║ Authentication Bypass → Password Reset → RCE ║...

HolyGrail

HolyGrail A BYOVD hunter for finding the HolyGrail driver - Windows drivers suitable for BYOVD. Install git clone https://github.com/BlackSnufkin/HolyGrail cd HolyGrail cargo build --release Quick start HolyGrail.exe -d "C:\path\to\driver.sys" Add JSON output, custom output dir, and policy dir if...

-CVE-2023-33177-

Xibo CMS CVE-2023-33177 Vulnerability Tester Automated security testing tool for CVE-2023-33177 - Zip Slip Path Traversal vulnerability in Xibo CMS that leads to Remote Code Execution RCE. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only. Only use on systems you own...

sqli-hunter-CVE-2024-51482-PoC

sqli-hunter-CVE-2024-51482-PoC Python scripts for exploiting CVE-2024-51482 SQLi in ZoneMinder — HTB CCTV sqli-hunter — CVE-2024-51482 Description This script automates the extraction of databases, tables, columns, and credentials by exploiting CVE-2024-51482, a Boolean-based SQL Injection...

CVE-2025-29009

CVE-2025-29009 WordPress Medical Prescription Attachment Plugin for WooCommerce Plugin = 1.2.3 is vulnerable to a high priority Arbitrary File Upload CVE-2025-29009 Webkul Medical Prescription Attachment — Unrestricted File Upload → Web Shell ,-. . , ,--. ,-. ,-. ,-. ;--' ,-. ,-. ,-. ,-. ,-. / | ...