helloexp/0day resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2364 stars · 906 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A continuously updated collection of exploits (EXP) and proofs-of-concept (POC) for vulnerabilities in various CMS platforms, systems, and software, organized by target (e.g., ThinkPHP, Shiro, Nginx, Windows privilege escalation). Intended for learning, CTF competitions, AWD, and authorized penetration testing.

Use cases

• find poc for a cms vulnerability
• collect exploits for ctf or awd competitions
• look up rce exploit for thinkphp or shiro
• study exploit code for learning security research
• find windows or linux privilege escalation exploits
• quickly locate payloads during penetration testing

When to choose

• you need a quick reference collection of public POCs/EXPs for CTF, AWD, or authorized pentesting
• you want to study real-world exploit code across many platforms and CMSs

When to avoid

• you need a maintained, structured vulnerability scanner or exploitation framework rather than a raw file collection
• you require legal assurance or vendor support for production security testing

Facets

dataset · maturity maintenance

penetration-testing security vulnerability-scanning security penetration-testing developer-tools cross-platform windows exploits poc cve offensive-security red-team ctf vulnerability-research collection linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="helloexp/0day")