Tools

hernanrodriguez1/sqli_sleeps

Detects time-based SQL injection by sending crafted GET requests to multiple URLs and measuring delayed responses; includes cookie support for…

gildasio/wshlient

A simple tool to interact with web shells and command injection vulnerabilities

adel-hx0d/cve-2006-3392

It is a simple tool to exploit local file include . vulnerabilities

stark0de/nginxpwner

Nginxpwner is a simple tool to look for common Nginx misconfigurations and vulnerabilities.

whxitte/white-deface

This is a simple python tool to automatically deface webdav vulnerable websites.

ipsbruno/cve-2022-1162

Exploit tool for CVE-2022-1162 that enumerates GitLab users and performs authentication bypass via a crafted login request.

telekom-security/explo

Human and machine readable web vulnerability testing format

0x2458bughunt/cve-2023-25157

Scans host lists for GeoServer endpoints vulnerable to CVE-2023-25157 SQL injection, verifies exposed paths with keyword checks, and logs confirmed…

angelusrivera/cve-2025-49844

Scanner and educational guide for CVE-2025-49844 (RediShell), a Redis Lua scripting use-after-free vulnerability. Checks Redis servers for exposure,…

jonasuliana/cve-2017-8759

Simple C# implementation of CVE-2017-8759

77philly/cve-2024-7456scripts

Bash and Node.js scripts to automate SQL injection exploitation against vulnerable web applications, targeting CVE-2024-7456.

b-abderrahmane/cve-2021-44228-playground

Docker-based lab to validate CVE-2021-44228 (Log4Shell) in Java apps, test mitigations, and simulate RCE via LDAP and HTTP payloads.

kleiton0x00/ppmap

A scanner/exploitation tool written in GO, which leverages client-side Prototype Pollution to XSS by exploiting known gadgets.

tegal1337/shelly

Simple Backdoor Manager with Python (based on weevely)

vedantrana73/cve-2019-9053-py3

Unauthenticated time-based blind SQL injection exploit for CMS Made Simple ≤ 2.2.9 (CVE-2019-9053), ported to Python 3.

la3b0z/cve-2025-24813-poc

CVE-2025-24813-POC JSP Web Shell Uploader

keepwannabe/remot3d

Remot3d: is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server by backdoors