w2xim3

CVE-2023-46805

CVE-2023-46805 Ivanti POC RCE - Ultra fast scanner.

sqljson

A powerful tool that allows users to query JSON data using SQL-like syntax. Effortlessly search, filter, and manipulate your JSON data with familiar SQL queries.

chisel

A fast TCP/UDP tunnel over HTTP

CrackMapExec

A swiss army knife for pentesting networks

CVE-2022-22965-PoC

CVE-2023-6933

Introduction to CVE-2023-6933 Vulnerability

CVE-2024-1403

Progress OpenEdge Authentication Bypass

CVE-2024-21378

PoC Exploit for Outlook Vulnerability, CVE-2024-21378

CVE-2024-38063

poc for CVE-2024-38063 (RCE in tcpip.sys)

dnsx

dnsx is a fast and multi-purpose DNS toolkit allow to run multiple DNS queries of your choice with a list of user-supplied resolvers.

EvilClippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

hakrevdns

Small, fast tool for performing reverse DNS lookups en masse.

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

qsfuzz

qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.

ScreenConnect-AuthBypass-RCE

ScreenConnect AuthBypass(cve-2024-1709) --> RCE!!!

Squirrel

SSLEnum

Extract SSL certificate data (Subject Name, Subject Alt Names, Organisation)

wafamole-plusplus

Expansion to WAF-A-MoLE SQL fuzzer built as course completion project

wwwolf-php-webshell

WhiteWinterWolf's PHP web shell