Initial Access Intelligence

Unauthenticated authentication bypass to RCE exploit for CVE-2024-10924. Abuses an authentication and 2FA bypass in the Really Simple Security WordPress plugin to impersonate an admin user, upload a malicious plugin, and achieve remote command execution via an interactive shell.

Python Shell CSS SCSS PHP JavaScript HTML Less

CVE-2026-0594 List Site Contributors Plugin Exploit

Go

None

Dockerfile HTML PLpgSQL Shell TypeScript CSS JavaScript

None

Go

Unauthenticated 0-click RCE exploit for CVE-2024-50526. Exploits an arbitrary file upload vulnerability in a vulnerable WordPress form plugin to upload a PHP payload, verify its location, detect the target operating system, and achieve remote command execution via an interactive shell.

Python PHP CSS JavaScript

None

JavaScript HTML CSS

Pure-Rust VM disk inspection — zero boot, zero agents, instant insight. AI-powered diagnostics explain what’s inside, what’s broken, and what to fix before you boot.

Python Rust Shell HTML CSS Go Template Dockerfile

Unauthenticated 0-click RCE exploit for CVE-2024-51791. Exploits an arbitrary file upload vulnerability in a vulnerable WordPress forms plugin to upload a PHP payload, locate the uploaded file, detect the target OS, and obtain remote command execution via an interactive shell.

Python Shell PHP CSS JavaScript SCSS

None

PowerShell Shell

A hands-on project demonstrating the setup of virtual security lab, network reconnaissance, and exploitation of CVE-2012-1823.