# XiphosResearch/exploits

Miscellaneous exploit code

Repository: https://github.com/XiphosResearch/exploits
Canonical: https://ross.abutalabs.com/products/xiphosresearch-exploits
Homepage: http://www.xiphosresearch.com/
Language: Python
License Family: other
Topics: exploits, python, poc, rce, php, security, hacking, windows, bypass, tr-064
Last push: 2023-10-06T19:57:20+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 4199, "days_push": 1062, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1575, forks 583 (observed 2026-08-28T04:05:05.912047+00:00)

## What it is
A collection of miscellaneous proof-of-concept exploit scripts written by Xiphos Research for security testing purposes, covering CVEs across web applications, CMS platforms, routers, and embedded devices. Each exploit is a standalone Python (and occasionally other-language) script targeting a specific disclosed vulnerability such as remote code execution, shell upload, or SQL injection.

## Use cases
- verify a CVE is exploitable on my own systems during a pentest
- find a proof-of-concept exploit for a known remote code execution vulnerability
- test whether a Joomla or WordPress instance is vulnerable to a published CVE
- learn how real-world exploit code is written
- reproduce a disclosed vulnerability in a lab environment
- get a reliable alternative to sketchy public exploit code for an old bug

## When to choose
- you need a quick, standalone PoC script for a specific CVE rather than a full exploitation framework
- you are doing authorized penetration testing or vulnerability research and want reference exploit implementations
- you want readable Python exploit code instead of Metasploit modules
- you are studying exploit development techniques across web apps, CMSes, and embedded devices

## When to avoid
- you need a maintained, comprehensive exploitation framework with payload handling and post-exploitation - use Metasploit instead
- you expect ongoing updates, new exploits, or support - the collection is sporadic and many entries target very old software
- you need code with a clear license - the repository has no top-level license and defers to individual exploit files
- you are looking for a vulnerability scanner or automated assessment tool rather than targeted exploit scripts

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: penetration-testing, vulnerability-scanning, security
- domain: security, penetration-testing, developer-tools
- platform: python, windows, cli
- tags: exploits, proof-of-concept, rce, cve, red-team, vulnerability-research, web-exploitation, router-exploits, wordpress-exploits, local-privilege-escalation, linux

## Member repositories
- XiphosResearch/exploits (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:05.912047+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:57:34.956838+00:00, confidence not recorded.
  - readme: https://github.com/XiphosResearch/exploits (fetched 2026-08-28T04:05:05.912047+00:00, sha f093ad86f1d7)
- Data as of 2026-08-30T08:39:29.467469+00:00.