Tools

techcorp/cve-2025-8088-exploit

A proof-of-concept exploit for WinRAR vulnerability (CVE-2025-8088) affecting versions 7.12 and lower. This tool creates a malicious RAR archive that…

globalsecureacademy/cve-2024-24919

Exploit tool to validate CVE-2024-24919 vulnerability on Checkpoint Firewall VPNs

strozfriedberg/ssh-weak-dh

Audits SSH servers for weak Diffie-Hellman key exchange groups by testing multiple client configurations, identifying Logjam-vulnerable endpoints…

d4vinci/xoe

Exploit XXE Out-Of-Band Vulnerability Easily

exploit-io/cve-2021-41349

Exploit tool for CVE-2021-41349 that generates an HTML form to deliver XSS payloads to Microsoft Exchange servers, enabling execution of arbitrary…

spamixofficial/cve-2023-38831

CVE-2023-38831 Proof-of-concept code

synacktiv/metamorph

A command-line utility for Windows written in C that creates and configures persistent Event Tracing for Windows (ETW) AutoLogger sessions.

z1ph1us/milksad-mnemonic-generator

This tool generates BIP-39 mnemonic phrases derived from Unix timestamps, exploring the 'Milk Sad' vulnerability's implications (CVE-2023-39910)

henkru/cs-token-vault

In-memory token vault BOF for Cobalt Strike

skynoxk/cve-2026-27944

Automated exploit for CVE-2026-27944 in Nginx UI: downloads and decrypts backups, extracts secrets, and creates rogue admin accounts for full…