Multi-threaded C2 framework built in Flask with keylogger - from the Offensive C# Course by Naga Sai Nikhil

Online Bike Rental - Authenticated RCE - Built by hyd3sec & boku

Car Rental Management System Unauthorized RCE Exploit - Built by hyd3sec

Travel Management System v1.0 Unauthenticated RCE Exploit

Python3 XHR-Harvester to harvest creds (sample login page also included)

DIVA Android - Damn Insecure and vulnerable App for Android

Exploit for House Rental v1.0 Remote Code Execution (Unauthenticated)

Azur3Alph4 is a PowerShell module that automates red-team tasks for ops on objective. This module situates in a post-breach (RCE achieved) position.

House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability allowing remote attackers to execute arbitrary code on the hosting webserver via sending a malicious POST request.