Skip to content

@ambionics Ambionics Security

Change the repository type filter

All

    Repositories list

    14 repositories

    • wso2-exploits

      Public
      Python
      •0•2•0•0•Updated Feb 5, 2026Feb 5, 2026

    • phpggc

      Public
      PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
      PHP
      •
      Apache License 2.0
      •545•3.8k•2•12•Updated Sep 29, 2025Sep 29, 2025

    • lightyear

      Public
      lightyear is a tool to dump files in tedious (blind) conditions using PHP filters
      Python
      •11•112•0•1•Updated Jun 23, 2025Jun 23, 2025

    • wrapwrap

      Public
      Generates a `php://filter` chain that adds a prefix and a suffix to the contents of a file.
      Python
      •11•237•2•0•Updated Oct 8, 2024Oct 8, 2024

    • cnext-exploits

      Public
      Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()
      Python
      •60•505•0•0•Updated Sep 30, 2024Sep 30, 2024

    • symfony-exploits

      Public
      Exploits targeting Symfony
      Python
      •50•214•0•0•Updated Sep 19, 2024Sep 19, 2024

    • scalpel

      Public
      Scalpel is a Burp extension for intercepting and rewriting HTTP traffic, either on the fly or in the Repeater using Python 3 scripts.
      Python
      •
      Apache License 2.0
      •2•68•1•0•Updated May 31, 2024May 31, 2024

    • owncloud-exploits

      Public
      ownCloud exploits for CVE-2023-49105
      Python
      •10•37•1•0•Updated Dec 5, 2023Dec 5, 2023

    • vbulletin-exploits

      Public
      Exploits targeting vBulletin.
      Python
      •13•75•0•0•Updated Apr 15, 2023Apr 15, 2023

    • laravel-exploits

      Public
      Exploit for CVE-2021-3129
      Python
      •69•284•0•0•Updated Jan 29, 2021Jan 29, 2021

    • sqreen-exploit

      Public
      Sqreen microagent RCE
      JavaScript
      •1•2•0•0•Updated Nov 19, 2020Nov 19, 2020

    • mt_rand-reverse

      Public
      Script to recover mt_rand()'s seed with only two outputs and without any bruteforce.
      Python
      •14•161•0•0•Updated Jan 6, 2020Jan 6, 2020

    • magento-exploits

      Public
      Exploits for Magento 2.3.0 and lower
      Python
      •51•146•0•0•Updated Mar 29, 2019Mar 29, 2019

    • prestashop-exploits

      Public
      Collection of exploits/POC for PrestaShop cookie vulnerabilities (CVE-2018-13784)
      Python
      •12•48•0•0•Updated Jul 17, 2018Jul 17, 2018