MySQL-Fu.rb
hood3drob1n/mysql-fu.rbMySQL-Fu is a Ruby based MySQL Client Script I wrote. It does most of the stuff a normal MySQL client might do: SQL Shell, Update/Delete/Drop…
database-securityexploitationpayload-generation+3
3
hood3drob1n/mysql-fu.rbMySQL-Fu is a Ruby based MySQL Client Script I wrote. It does most of the stuff a normal MySQL client might do: SQL Shell, Update/Delete/Drop…
shieldersec/cve-2020-11579Exploit code for CVE-2020-11579, an arbitrary file disclosure through the MySQL client in PHPKB
petergabaldon/cve-2024-1346Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of…
0xwhoami35/cve-2023-23752Authentication bypass exploit for Joomla CVE-2023-23752 that leaks administrator credentials and MySQL configuration from vulnerable versions…
1h3ll/cve-2025-50364_csrf_add_category-phpgurukul-cveProof-of-concept CSRF exploit targeting CVE-2025-50364 in PHPGurukul Maid Hiring Management System v1.0 that adds arbitrary admin categories via a…
1h3ll/cve-2025-50365_csrf_delete_category-phpgurukul-cvePoC for CVE-2025-50365: a CSRF flaw in PHPGurukul Maid Hiring Management System allowing deletion of hiring categories via a crafted admin request.
hakaioffsec/cve-2026-40083Proof-of-concept exploit for CVE-2026-40083, a SQL injection in Cacti managers.php allowing authenticated users to extract MySQL databases, user…
rashidkhanpathan/cve-2022-43117Proof-of-concept exploit for CVE-2022-43117, a stored XSS vulnerability in Sourcecodester Password Storage Application 1.0, demonstrating JavaScript…
mr-wolf-gb/d-rat_vb.net_mysql_phpD-RAT [VB.NET]+[MySQL]+[PHP]
lan1oc/cve-2026-5147-expExploit script for CVE-2026-5147, performing boolean and time-based blind SQL injection against MySQL interfaces to extract version, database,…
warp-tech/warpgateFully transparent SSH, HTTPS, Kubernetes, database and RDP/VNC bastion/PAM that doesn't need additional client-side software
moulish2004/cve-2025-44603-csrf-leads_to_create_fakeusersProof-of-concept demonstrating a CSRF vulnerability in a PHP-based Client Management System, with HTML exploit code and mitigation strategies for web…
croway/potential-cassandraCVE discovery
unix13/metasploitable2PHP-CGI-REMOTE_CVE-2012-1823, UnrealIRCd, MySQL, PostgreSQL and SSH bruteforce, VSFTPD2.3.4, samba CVE-2007-2447, JAVA RMI Server, distcc daemon,…
mdriaz009/cve-2025-21574-exploitBlack-box exploit for CVE-2025-21574 targeting MySQL servers. Automates credential brute-forcing, anonymous access attempts, and triggers server…
dbeaver/dbeaverFree universal database tool and SQL client
ayham-megdadi/zero-day-legacyA vulnerable Boot-to-Root CTF lab machine simulating a hospital environment. Features a realistic 17-step attack chain including SQL Injection, XSS,…