Pinned Loading

1. PwnRM PwnRM Public

   PwnRM is an operator-grade Active Directory post-exploitation platform engineered directly upon the native Microsoft PowerShell Remoting Protocol (MS-PSRP) and WS-Management (MS-WSMV) standards.

   Python 98 12

2. CVE-2025-33073 CVE-2025-33073 Public

   Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled.

   Shell 68 10

3. CVE-2026-86259 CVE-2026-86259 Public

   OpenMAIC 1.0.0: Unauthenticated Outbound SSRF to Cloud Metadata Service via Fail-Open Middleware and Environment-Gated Validation Bypass

   TypeScript

4. CVE-2026-88899 CVE-2026-88899 Public

   Knowns 0.30.0: Unauthenticated Header Injection Grants AI Agent Unrestricted Access to Host Filesystem

   Python

5. THU-MAIC/OpenMAIC THU-MAIC/OpenMAIC Public

   Open Multi-Agent Interactive Classroom — Get an immersive, multi-agent learning experience in just one click

   TypeScript 43.4k 6.7k

6. CVE-2026-96760 CVE-2026-96760 Public

   Authlib 1.7.2: Signature Verification Bypass - General JSON JWS Accepts Unsigned Payload when `signatures` is Empty

   Python