kerem Claim this profile

PoC for CVE-2026-41940: WHM/cPanel authentication bypass chain (Python 2.7). For authorized security research and testing only.

Go-based lab tooling for authorized network research. Use only on systems you own or with explicit permission. Provided as-is; user bears all legal responsibility.

SETROOTCERTIFICATE (write /etc/cert.pem.1) + APPLYAPP (RC_SERVICE execution). Refs: CVE-2025-2492, CVE-2024-12912, CVE-2025-59366; runZero; routersploit; ASUS advisory.

PoC list runner for CVE-2026-1306 (WordPress midi-Synth ≤1.1.0): fetches exposed midiSynth_nonce, POSTs export AJAX to drop files under sound/. Authorized security testing only.

CVE-2026-8181 PoC: Burst Statistics (3.4.0–3.4.1.1) authentication bypass. Python tool — single & multi-target scans, threaded workers, TXT reports. Authorized testing only. Maintainer: mürrez.

PoC for CVE-2026-6433: WordPress FlipperCode Custom CSS, JS & PHP (≤2.0.7) — unauthenticated SQLi to RCE. Python 3 stdlib; single target or bulk multi-threaded scanning. Authorized testing & research only.

aktools

IP_CAMS_EXPLOIT

CVE-2026-0740

CVE-2026-0911 için kimlik doğrulamalı test aracı: Hustle eklentisinde modül içe aktarma üzerinden zayıf dosya yükleme ve “yetim dosya” davranışını kontrol eder; yalnızca izinli ortamlarda ve geçerli WordPress oturumuyla kullanılmalıdır.

mirai-zhone-exploit

fiber-mirai-exploit

joomla-mass-rce

ddos

dumped-database

database-layer7

Disclaimer-only docs: legal/ethical notice and high-level defensive context. No installation or operational instructions.

All Discord DM Deleted

private-tool

Büyük ULP listelerinden cPanel, Plesk ve WordPress kayıtlarını filtreleyen, formatlayan ve cPanel/Plesk giriş doğrulaması yapan Python araç seti.

RapidDNS ile reverse IP, toplu domain listesi → benzersiz alan adları.

3.10.0 local root

realtek-new-exploit

Nebula C2 - Python

cf-uam

dork-sikenner

mysql-root

ip-range-explotiV2

priv8-araf-shell

ip-range-exploit

admintools

2020-root

bing-dork

arianagrande.com