TLS-Scanner

TLS-Scanner TLS-Scanner is a tool to assist pentesters and security researchers in the evaluation of TLS server and client configurations. Please note: TLS-Scanner is a research tool intended for TLS developers, pentesters, administrators and researchers. There is no GUI. It is in the first versi...

CVE-2021-33739_PoC_Analysis

This is what I analyzed and studied about CVE-2021-33739 PoC. You can get the full resources from here: https://github.com/freeide2017/CVE-2021-33739-POC...

hetty

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Machine-in-the-middle MITM HTTP proxy, with logs and advanced...

metarget

中文 | English 1 Introduction Metarget = meta- + target, a framework providing automatic constructions of vulnerable infrastructures, used to deploy simple or complicated vulnerable cloud native targets swiftly and automatically. 1.1 Why Metarget? During security researches, we might find that the...

Exploit-en-Python-para-CVE-2023-4147

🚨 Python Exploit for CVE-2023-4147 Proof of Concept exploit for CVE-2023-4147. Exclusively for security research and education. ⚠️ Legal Warning EXCLUSIVELY EDUCATIONAL AND AUTHORIZED USE ✅ Authorized security research ✅ Controlled lab environments ✅ Cybersecurity education ✅ Authorized bug bounty...

SpringBootVulExploit

Spring Boot Vulnerability Exploit Check List Collection of Spring Boot related vulnerability learning materials, exploitation methods and techniques, black-box security assessment check list Statement ⚠️ All content in this project is only for security research and authorized testing. Those who...

NextJS-CVE-2025-29927-Docker-Lab

🚨 NextJS-CVE-2025-29927-Docker-Lab This repository contains a Docker-based lab environment to explore and demonstrate the Next.js CVE-2025-29927 vulnerability in a controlled setting. ⚠️ DISCLAIMER: This lab is for educational and security research purposes only. Do not expose it to the public...

cve

CVE PoC Almost every publicly available CVE PoC. Current hottest CVEs Title| URL ---|--- CVE-2022-0001| /trickest/cve/blob/main/2022/CVE-2022-0001.md CVE-2022-25297| /trickest/cve/blob/main/2022/CVE-2022-25297.md CVE-2022-1388| /trickest/cve/blob/main/2022/CVE-2022-1388.md CVE-2022-25451|...

HowToHunt

HowToHunt A collection of practical guides, methodologies, and resources for hunting vulnerabilities From Hackers for Community, because Hacking is not just a skill It’s a Mindset 💡 What is HowToHunt? HowToHunt is a collaborative repository of step-by-step guides, methodologies, and hands-on...

L0p4Map

L0p4Map Nmap was blind. L0p4Map sees. Professional network monitoring & visualization tool built for security researchers. https://github.com/user-attachments/assets/745eb888-0636-47e8-9293-38a706a8e897 What is L0p4Map? L0p4Map is a professional grade network monitoring tool that combines the pow...

Nightingale

Nightingale: Docker for Pentesters This project is supported by: | ---|--- Nightingale is a ready-to-use, multi-architecture Docker toolkit for pentesting and security research. It gives you a reproducible environment with curated tools for web, network, mobile, API, OSINT, and forensics workflow...

creepy

creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...

CVE-2025-29927

Next.js Middleware Bypass Checker | CVE-2025-29927 Automated Bash tool to detect Next.js applications vulnerable to the middleware bypass CVE-2025-29927 , based on research by Zhero Web Security. Requirements bash whatweb curl Install them on Debian/Ubuntu with: sudo apt install whatweb curl Usag...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

CVE-2024-2876

CVE-2024-2876 POC for SQLi vulnerability in Icegram express Legal Disclaimer The Proof of Concept PoC script provided in this repository serves solely for educational and research objectives. Its purpose is to showcase a specific vulnerability and aid in comprehending associated security risks. A...

uncaptcha

uncaptcha Defeating Google's audio reCaptcha system with 85% accuracy. Disclaimer unCaptcha is intended to be a proof of concept. As of the time of our paper, we found it to successfully solve reCaptcha's audio challenges with 85% success. Since that time, reCaptcha appears to include some...

ObfuXtreme

If you find this GitHub repo useful, please consider giving it a star! ⭐ ⚡ ObfuXtreme — Advanced Python Obfuscation Engine ObfuXtreme is an advanced Python obfuscation engine focused on structural obfuscation , AST-level transformations , and runtime payload protection. It is designed for securit...

awesome-web-hacking

awesome-web-hacking This list is for anyone wishing to learn about web application security but do not have a starting point. You can help by sending Pull Requests to add more information. If you're not inclined to make PRs you can tweet me at @infoslack Table of Contents Books Documentation Tool...

CVE-2021-26084_GoPOC

CVE-2021-26084GoPOC PoC of CVE-2021-26084 written in Golang based on https://twitter.com/jas502n/status/1433044110277890057?s=20...

ctf-tools

ctf-tools This is a collection of setup scripts to create an install of various security research tools. Of course, this isn't a hard problem, but it's really nice to have them in one place that's easily deployable to new machines and so forth. The install-scripts for these tools are checked ever...