47,133 repositories indexed
1–21 of 21 · Most stars
TranslatedA comprehensive security assessment tool developed in-house by Chaitin (长亭), supporting scanning for common web security issues and custom PoCs | Be sure to read the documentation before use
The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.
各种漏洞poc、Exp的收集或编写
A collection of JavaScript engine CVEs with PoCs
CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.
The Prime Cross Site Request Forgery (CSRF) Audit and Exploitation Toolkit.
Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 / CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
Fail-closed swarm orchestration with epoch-fenced work and late-completion rejection.
A PoC that the USB port is an attack surface for a Mazda car's infotainment system and how Mazda hacks are made
Latest hashcat docker for CUDA, OpenCL, and POCL. Deployed on Vast.ai
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12
This plugin implements Telegram WebApp Auth and Telegram Login Widget for the pocketbase
PocketBase + SvelteKit (Static): minimalistic template with configured authorization featuring a single binary or Docker image for deploying.
IOS/MAC Denial-Of-Service [POC/EXPLOIT FOR MASSIVE ATTACK TO IOS/MAC IN NETWORK]
The repository host gives no description.
Wrapper for Next.js applications using PocketBase, with support for both client and server components
Naive Proof of Concept Crypter for GNU/Linux ELF64
A simple PoC for the use of GPT3.5 in creating an SMTP honeypot
Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.