Pinned Loading

1. Online-Public-Access-Catalog-OPAC-SQLi-PoC Online-Public-Access-Catalog-OPAC-SQLi-PoC Public

   This PoC allows for boolean-based blind, time-based blind, and UNION-based injection techniques, enabling database enumeration and data exfiltration.

2. SiempreCMS-File-Upload-Abuse SiempreCMS-File-Upload-Abuse Public

   An attacker can upload files to arbitrary directories under ../media/, including hidden ones. Though execution isn't possible, this can flood directories, exhaust disk space, and degrade performanc…

3. SiempreCMS-SQLi-POC SiempreCMS-SQLi-POC Public

   The user_search_ajax.php file is vulnerable to SQL injection due to improper handling of user-supplied input. User inputs are passed directly to the database query without proper parameterization o…

4. webmin-1.900-exploit webmin-1.900-exploit Public

   The issue is related to Python 2, and the variable 'key' is also not defined. Use this script instead.

   Python

5. ioc-checker ioc-checker Public

   For Bulk IOC Checking

   Python

6. xss-db xss-db Public

   XSS Database for wordlist, phishing and hijacking

   HTML