799 matches found
cam-hunter
📡 CAM HUNTER — Advanced DVR / NVR / XVR Security Testing Frame...
ChainHangLow
QNAP Firmware Encryption Key Extraction - CVE Exploitation Gui...
CVE-2026-50558
Penelope Shell Handler is a post-exploitation shell handler for authorized security testing. Prior to 0.20.0, the Unix download implementation in penelope.py used tar.extractalllocaldownloadfolder on tar archives returned by remote sessions without validating member paths, allowing a malicious or...
CVE-2026-50558 Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
Penelope Shell Handler is a post-exploitation shell handler for authorized security testing. Prior to 0.20.0, the Unix download implementation in penelope.py used tar.extractalllocaldownloadfolder on tar archives returned by remote sessions without validating member paths, allowing a malicious or...
exploit-counter
exploit-counter !cihttps://github.com/nickharris808/explo...
Exploit for Code Injection in Craftcms Craft_Cms
CVE-2025-32432 Craft CMS PoC Single-target proof-of-concept...
Exploit for CVE-2026-63030
WP2Shell Detector and Validation PoC !License: MIThttps:/...
FLOCK_CVE_SCANNER
FLOCKCVESCANNER Scan and exploit with permission Ov...
Exploit for Insecure Default Initialization of Resource in Apache Solr
CVE-2026-44825 Apache Solr Scanner This repository contains a...
The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API
Part 2: How the Red Agent bypassed backend resolvers to expose an entire airline booking database in fifteen minutes...
ITScape
🛡️ ITScape - Test your systems for security gaps !https:/...
Can Open-Source LLM Agents Replace Static Application Security Testing Tools? an Empirical Assessment
This paper explores the value of agentic AI tools for cybersecurity purposes. We evaluate the efficacy of a general-purpose GenAI Large Language Model- GenAI- based agent when powered by three different Ollama-hosted general-purpose open source models. We assess each agent's performance using...
Windows Notepad WebDAV UNC Reference Markdown File Generator
This Metasploit auxiliary module is a file-format generation tool intended for security testing of a CVE-2026-20841 related to Windows Notepad Markdown handling. It produces a Markdown file containing a UNC WebDAV-style path embedded as a clickable link for behavioral analysis...
glitchtip-dns-rebinding-gap-poc
GlitchTip DNS rebinding gap PoC This PoC models the DNS rebin...
📄 MCPJam Inspector 1.4.2 Command Injection
This is an advanced Python proof of concept for CVE-2026-23744 demonstrating command injection through a vulnerable MCP API endpoint, leading to remote code execution and reverse shell access. The script supports multiple payload types, endpoint discovery, listener management, and several...
Exploit for Missing Authentication for Critical Function in Mcpjam Inspector
CVE-2026-23744 - MCPJam Inspector RCE PoC Proof of Concept ex...
Exploit for CVE-2026-8832
EXPLOIT CVE-2026-8832 !Bannerhttps://img.shields.io/badge/...
Exploit for Path Traversal in Grafana
GrafTraverse - CVE-2021-43798 MiNi Exploitation Framework...