tr0uble-mAker/POC-bomber

Health v2 · maintenance only

Adoption not part of the score

2369 stars · 386 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

POC-bomber is a Python-based offensive security tool that bundles a large arsenal of high-impact POCs and EXPs (RCE, deserialization, file upload, SQL injection) to rapidly detect and exploit vulnerable targets. It supports single and batch scanning with a concurrent thread pool, DNSLOG-based blind RCE detection, custom POC import, and an attack mode for one-click exploitation.

Use cases

• batch scan a list of urls for known cve exploits
• quickly find exploitable assets during red team engagements
• detect blind rce like log4j2 using dnslog
• run a specific exploit like thinkphp rce against a target
• build a personal vulnerability scanner with custom pocs
• fuzz many targets for high-severity vulnerabilities

When to choose

• you need fast bulk exploitation of known high-severity vulnerabilities across many targets
• you are doing authorized red team work or attack-surface assessment and want a ready-made poc arsenal
• you want dnslog-based detection of no-echo rce vulnerabilities

When to avoid

• you need a compliant enterprise vulnerability scanner with reporting and asset management
• you only want passive or non-intrusive vulnerability assessment
• you lack explicit authorization to test the targets, as this tool performs active exploitation

Facets

cli-tool · maturity maintenance

vulnerability-scanning penetration-testing security security penetration-testing developer-tools python cli windows poc exp redteam rce getshell cve offensive-security dnslog batch-scanning linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="tr0uble-mAker/POC-bomber")