NULL200OK

cve_2026_34621_advanced. A sophisticated, cross-platform exploit generator for **CVE-2026-34621** – a critical prototype pollution vulnerability in Adobe Acrobat and Reader that leads to sandbox escape and arbitrary code execution on Windows and macOS.

SSRF-to-RCE-Scanner. IT is advanced Python-based security tool designed to automate the detection and exploitation of SSRF (Server-Side Request Forgery) and RCE (Remote Code Execution) vulnerabilities in web application email input fields. This tool follows a systematic methodology to escalate from SSRF detection to full RCE exploitation with minimal false positives.

CVE-2026-27944. CVE-2026-27944 - Nginx UI Unauthenticated Backup Download & Decryption

cve-2026-41940-tool. A comprehensive Python utility to **detect**, **scan in bulk**, and **exploit** the critical authentication bypass vulnerability (CVE-2026-41940) in cPanel & WHM and WP Squared.

IIS-Bug-Bounty-Hunter-v2. A comprehensive security assessment tool for finding vulnerabilities in Microsoft IIS servers. Designed for bug bounty hunters, penetration testers, and security researchers.

worm-ai-port-dominator. Advanced All-in-One Penetration Testing Framework for Stealth Port Scanning, Service Detection, Port Manipulation, and Vulnerability Assessment

PyGuard-Obfuscator. 🛡️ PyGuard: Advanced Python Obfuscator & EXE Compiler

CVE-2025-41244. CVE-2025-41244 is a critical local privilege escalation vulnerability in VMware Aria Operations and VMware Tools

CVE-2026-22730-Scanner. CVE-2026-22730 Scanner & Exploit – Spring AI MariaDB Vector Store SQL Injection ,A professional security assessment tool for CVE-2026-22730 – a critical SQL injection vulnerability discovered in Spring AI's MariaDB vector store.

CVE-2026-3228. CVE-2026-3228 - NextScripts WordPress Plugin Stored XSS Scanner & Exploit

-nginxui_discover. Nginx UI Discovery Scanner - CVE-2026-27944 Version Detector

DeepRecon. 🕸️ Advanced subdomain & JavaScript recon pipeline — Katana, Wayback, GAU, and more. Built by @NULL200OK.

pyro-central.github.io. HTML

rce_upload_always. 🧩 RCE Upload‑Always – LFI + Automated Polyglot Upload Automated Remote Code Execution via LFI & File Upload – with Double Encryption (AES‑256 + XOR) & Key Rotation

PyScript-to-GUI. A powerful, zero-dependency Python tool that instantly transforms your Command-Line Interface (CLI) scripts into clean, functional Graphical User Interfaces (GUI).

NULL200OK.

openclaw_scanner. OpenClaw Discovery Scanner (Enhanced)

ai_sentinel_enterprise.py. 🔥 AI-SENTINEL v4.0 - Advanced Web Security Scanner

network-security-auditor-plus. A modular, **asynchronous** network security auditing tool for internal infrastructure assessments. It discovers live hosts, performs port scanning with banner grabbing, measures network distance (hops), maps vulnerabilities to CVEs (via local DB or NVD API), includes optional exploitation modules for default credentials.

ai_bypass403_pro. AI-Powered 403 Bypass Tester – An intelligent, adaptive tool for security professionals to test and bypass 403 forbidden pages using smart strategies and extensive payloads. Automatically fingerprints servers, selects optimal attack vectors (path manipulation, headers, HTTP methods, protocol evasion), and generates detailed reports.

IBO-ATTACKS.github.io. HTML

rsrc.php. CSS

hacker0x01.github.io. HTML

threatlocker. HTML

network-security-auditor. A modular, **asynchronous** network security auditing tool for internal infrastructure assessments

NULL200OK.py. # 🔍 NULL200OK - Advanced Subdomain Scanner Professional subdomain discovery tool with passive/active reconnaissance. ## Features - Passive enumeration (SSL certificates, DNS records) - Active scanning with smart permutations - DNS brute-forcing - Multi-threaded scanning - Results export to TXT

OpenClaw-Indirect-Prompt-Injection. OpenClaw Indirect Prompt Injection Security Assessment Tool

login. HTML