🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
Repository Index
55,140 visible repositories in the index
49–72 of 133 · Most stars
Chrome extension and Express server that exploits keylogging abilities of CSS.
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
- android-application
- security-analysis
- dynamic-analysis
- xposed
Exploit chain for PS5 7.00 - 13.60
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
- post-exploitation
- hacking
- backdoor
- stealth
各种漏洞poc、Exp的收集或编写
The best tool for finding one gadget RCE in libc.so.6
- ctf
- pwnable
- pwn
- glibc
Reverse Shell as a Service
- reverse-shell
- exploit
- vulnerability
- pentesting
MongoDB session store for Express
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Interactive CTF Exploration Tool
- security
- reverse-engineering
- windows
- windows-internals
A php2shell exploit that requires no modifications to the official version, and does not require display_errors or limit_memory.
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
- csrf
- crawler
- csrf-attacks
- token-generation
Ephemeral root via the CVE-2026-43284 page-cache exploit
- android
- android-root
- android-security
- cve-2026-43284
Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.
An automated, modular cryptanalysis tool; i.e., a Weapon of Math Destruction
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
Find exploit tool
- exploit-database
- python
- pentest-tool
- exploits
A collection of android Exploits and Hacks
Detect deauthentication frames using an ESP8266
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
- chat-archive
- python
- secret-scanning
- sqlite
A friendly car security exploration tool for the CAN bus
- python
- can-bus
- security-scanner
- security-testing
Typed TypeScript SDK for direct and managed social platform integrations, with capability checks, explicit outcomes, and deterministic testing.
- api-integration
- bluesky
- bun
- developer-tools