gogs-rce #exploit
Gogs RCE via argument injection in git rebase (CWE-88) — Python PoC. No CVE yet.

https://github.com/portbuster1337/gogs-rce

cosmicsting-cve-2024-34102-exploit #exploit #scanner
Complete CosmicSting (CVE-2024-34102) exploit suite for Magento/Adobe Commerce XXE vulnerability

https://github.com/russellwork2021-lgtm/cosmicsting-cve-2024-34102-exploit

struts-uploader-vulnerability #exploit #scanner
Research of exploit options for CVE-2024-53667 and their remediation

https://github.com/baburkin/struts-uploader-vulnerability

HTB-Reactor-Linux-Machine---Walkthrough #exploit
Full walkthrough of HTB's Reactor machine — exploit CVE-2025-55182 to gain a shell, then get root via an exposed Node.js debugger. Step-by-step with screenshots.

https://github.com/sonnycroco/HTB-Reactor-Linux-Machine---Walkthrough

cve_2025_47227 #exploit #password
Exploit for CVE-2025-47227 - ScriptCase Password Reset (Pre-Auth)

https://github.com/Outs1d3r-Net/cve202547227

SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298 #exploit
SOC336 - Windows OLE Zero-Click RCE Exploitation Detected (CVE-2025-21298) Walkthrough

https://github.com/abc1230940/SOC336-Windows-OLE-Zero-Click-RCE-Exploitation-Detected-CVE-2025-21298

Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit #exploit
Attacker Hoverfly (≤ 1.11.3)

https://github.com/0x00phantom-hat/Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit

cve-2025-50946 #exploit
Exploit script for CVE-2025-50946

https://github.com/runt1me/cve-2025-50946

CVE-2025-55182-React2shell #exploit
CVE-2025-55182 Exploit Tool – Python 2.7 exploit for Next.js prototype pollution leading to RCE

https://github.com/Jenderal92/CVE-2025-55182-React2shell

React2Shell-CVE-2025-55182 #exploit
CVE-2025-55182 — Unauthenticated RCE in React Server Components (React2Shell). CVSS 10.0 exploit tool for authorized penetration testing.

https://github.com/SpeatX/React2Shell-CVE-2025-55182

Argos-Recon #bugbounty #osint #recon
bugbounty recon osint python security pentesting async reconnaissance bug-bounty-tools

https://github.com/FortisFortuna-br/Argos-Recon

AutomationToolkit #osint #recon
A set of tools and scripts focused on automating repetitive pentesting processes, from initial reconnaissance to reporting.

https://github.com/gabrielBarbacil/AutomationToolkit

nethunter-learn #pentest
Hindi Ethical Hacking Learning Platform - Kali NetHunter tools tutorials in Hindi Devanagari

https://github.com/termux-learn-crypto/nethunter-learn

OSINT-POPPY-TOOLS #osint
COMING SOON

https://github.com/ollarethe4k-dotcom/OSINT-POPPY-TOOLS

overreach #scanner
Catch code that overreaches before it merges — a fast capability scanner for diffs, files, and repos.

https://github.com/Conalh/overreach

beaglex-mac #scanner
Optimize system performance and security on macOS with this native memory cleaner, security scanner, and system monitor built in SwiftUI.

https://github.com/Neckless-khat431/beaglex-mac

hol-guard #pentest
AI antivirus for developer agents: protect Codex, Claude Code, Cursor, Gemini, OpenCode, plugins, skills, MCP servers, and AI harnesses before tools run.

https://github.com/hashgraph-online/hol-guard

assay #scanner #web
Another CLI web-application security scanner with nuclei

https://github.com/TyrusRC/assay

cli #scanner #web
Security scanner for Model Context Protocol (MCP) servers. Finds auth bypasses, injection vulnerabilities, CORS misconfigs, dangerous tool capabilities, and more. Scan HTTP/SSE endpoints or analyze...

https://github.com/mcpscanner/cli

hwid-spoofer-utility #pentest
Spoof hardware identifiers to bypass system-level bans and restrictions.

https://github.com/mani5717/hwid-spoofer-utility

ClaudeSec #pentest
AI-Driven White Hat Security Testing Framework

https://github.com/mmlqm/ClaudeSec