Skip to content

@hakaioffsec Hakai Security

Change the repository type filter

All

    Repositories list

    20 repositories

    • CVE-2026-33725

      Public
      Exploit for CVE-2026-33725 - Remote Code Execution and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import
      Python
      •5•21•0•0•Updated Apr 23, 2026Apr 23, 2026

    • chupabase

      Public
      Chupabase is an automated security assessment tool designed to identify and exploit misconfigurations in Supabase-backed applications by reconstructing API endp…
      Python
      •5•19•0•0•Updated Mar 25, 2026Mar 25, 2026

    • CVE-2026-25769

      Public
      Remote Code Execution via Insecure Deserialization in Wazuh Cluster
      Python
      •8•40•0•0•Updated Mar 17, 2026Mar 17, 2026

    • beerus-android

      Public
      BEERUS Framework for Android
      C
      •
      MIT License
      •81•608•2•0•Updated Mar 17, 2026Mar 17, 2026

    • coffee

      Public
      A COFF loader made in Rust
      rustcobalt-strikebof
      rustcobalt-strikebofcoffcoff-loader
      Rust
      •
      GNU General Public License v3.0
      •53•334•0•0•Updated Mar 14, 2026Mar 14, 2026

    • beerus-server

      Public
      Python
      •
      MIT License
      •3•1•0•0•Updated Mar 13, 2026Mar 13, 2026

    • Centreon-Exploits-2026

      Public
      Centreon exploits CVE-2026-2749, CVE-2026-2751 and CVE-2026-2750
      Python
      •1•9•0•0•Updated Mar 2, 2026Mar 2, 2026

    • keytabextractor

      Public
      Extracts Key Values from .keytab files
      Python
      •0•6•0•0•Updated Jan 15, 2026Jan 15, 2026

    • jwt-hunter

      Public
      Simple tool for exploiting JWT vulnerabilities
      Vue
      •4•14•0•0•Updated Dec 1, 2025Dec 1, 2025

    • browservoyage

      Public
      A tool to extract cookies and passwords from major web browsers, passively, with no process injection.
      Rust
      •6•60•0•0•Updated Oct 31, 2025Oct 31, 2025

    • APKs-Tips-and-Tricks

      Public
      1•1•0•0•Updated Jul 10, 2025Jul 10, 2025

    • CVE-2025-49113-exploit

      Public
      Proof of Concept demonstrating Remote Code Execution through insecure deserialization in Roundcube (CVE-2025-49113).
      PHP
      •17•89•0•0•Updated Jun 6, 2025Jun 6, 2025

    • IngressNightmare-PoC

      Public
      This is a PoC code to exploit the IngressNightmare vulnerabilities (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and CVE-2025-1974).
      Python
      •55•249•0•0•Updated Mar 26, 2025Mar 26, 2025

    • jwt-vulnerabilities-lab

      Public
      JavaScript
      •
      GNU General Public License v3.0
      •3•5•0•0•Updated Sep 23, 2024Sep 23, 2024

    • CVE-2024-21338

      Public
      Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.
      C
      •
      GNU General Public License v3.0
      •65•318•2•0•Updated Apr 16, 2024Apr 16, 2024

    • gcp_enum

      Public
      A Python script to authenticate and test access to Google Cloud Platform (GCP) resources.
      Python
      •2•17•0•0•Updated Jan 31, 2024Jan 31, 2024

    • BEERUS

      Public
      Java
      •5•12•0•0•Updated Dec 29, 2023Dec 29, 2023

    • Reconnaissance-like-a-cyber-scout

      Public
      Enumeration is an essential phase in the hacking process. It involves gathering information about a specific target, such as networks, systems, applications, or…
      0•5•0•0•Updated Jun 28, 2023Jun 28, 2023

    • navgix

      Public
      navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities
      Go
      •5•74•2•0•Updated May 20, 2023May 20, 2023

    • InfoIpFinder

      Public
      Python
      •1•2•0•0•Updated Jun 30, 2022Jun 30, 2022
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.