CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
- cve-2026-109618
- cve-2026-109619
- detection-rules
- exploit
Repository Index
79,350 visible repositories in the index
169–192 of 285 · Most stars
渗透测试插件化并发框架 / Open-sourced remote vulnerability PoC/EXP framework
RedTeam/Pentest notes and experiments tested on several infrastructures related to professional engagements.
Windows exploits, mostly precompiled. Not being updated. Check https://github.com/SecWiki/windows-kernel-exploits instead.
library for importing functions from dlls in a hidden, reverse engineer unfriendly way
- anti-reversing
- import
- export
- windows
node.js/express module to authenticate users without password
Apk控制流混淆；Apk-Dex2C；Res资源混淆；Dex、jar、smali文件的相互转换； Dex、Pdf文件合并； Apk、dex、jar混淆和字符串加密； Apk签名、共存； Res资源混淆； Dex、AXML、ARSC文件编辑及翻译；字符串加密(Apk、dex)； 一键添加Xposed检测，一键添加弹窗、对话框； axml反编译/回编译； 一键LOG添加； 一键添加字符串解密LOG，Dex文件换包名； 一键添加禁止截屏，一键添加Apk崩溃日志记录； Apk超级混淆3.0--高效率直接对dex混淆，支持混淆四大组件，支持多dex； Apk功能--DEX混淆对抗；屏幕取色器；屏幕标尺。
- dex
- dex2c
- dex2jar
- jar2dex
Build a database of libc offsets to simplify exploitation
- pwn
- libc
- offsets
- ctf
The Offensive Manual Web Application Penetration Testing Framework.
- web-penetration-testing
- reconnaissance
- vulnerability-analysis
- scanning-enumeration
Find exploits in local and online databases instantly
- exploits
- metasploit
- nmap
- pentest
linuxprivchecker.py -- a Linux Privilege Escalation Check Script
- oscp
- oscp-tools
- htb
- linux-privilege-escalation
Open Adversarial Exposure Validation Platform
- attack-simulation
- breach-simulator
- purple-team
- cybersecurity
PoCs and exploits for CVEs discovered by NebuSec.
Exploit for CVE-2019-11043
Search and download public exploits from the Vulners database — online, or fully offline from a local SQLite FTS5 index.
Root shell exploit for several Xiaomi routers: 4A Gigabit, 4A 100M, 4, 4C, 3Gv2, 4Q, miWifi 3C...
- openwrt
- xiaomi
- routers
- firmware
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
- ai-security
- bug-bounty
- claude
- ctf
Stealthy, Linux-first multi-operator C2 with a self-healing mesh, in-memory execution, and an AI-driven MCP assistant.
- post-exploitation
- stealth
- linux
- hacking-tool
Linux Exploit Suggester; based on operating system release number
Tool for automatic exploitation of XXE vulnerability using direct and different out of band methods.
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
🚀 Try the Learn EVM Explorer we just launched!!!
Official JavaScript repository for Clerk authentication
Application security for express apps.