A fast HackTheBox CLI tool to search machines, spawn targets, and submit flags via the HTB API v4.

ScadaFlare Authenticated RCE Exploit Framework for ScadaBR (CVE-2021-26828) OpenPLC ScadaBR

Python tool that locates Google account activity.

Proof-of-concept exploit for CVE-2025-66034 in the fontTools variable font generation pipeline. A crafted .designspace file allows control of the output path, enabling arbitrary file writes. The script automates payload creation, font generation, and upload to demonstrate the issue.

HTB Emdee five for life web challenge script

This repo contains RCE exploit for Pterodactyl htb machine

This repo contains RCE exploit for Era htb machine

This repo contains an exploit for HTB Desires challenge

This script automates the exploitation process of the Administrator machine from Hack The Box. It is divided into three phases to simplify and control manual steps that require user interaction, such as password cracking.

This is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and exploits an ImageMagick vulnerability (CVE-2024-41817) to gain root access via a malicious shared library.

This repo contains RCE exploit for Imagery htb machine

A tiny, single-process pyAesCrypt password bruteforcer for .aes files.

This repo contains RCE exploit for Browsed htb machine

This is a proxy server script which helps to achieve SQL injection on HTB WhiteRabbit Box

This is an automated privilege escalation script for the Hack The Box machine LinkVortex, which exploits an insecure sudo configuration and symbolic link processing vulnerability.

This is an automated exploitation script for the Hack The Box machine *Heal*. It extracts LimeSurvey credentials via LFI and deploys a malicious LimeSurvey plugin to trigger a reverse shell.

Website crawler created for pentest exercises like HTB.