sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool

w3c / webappsec

Web Application Security Working Group repo

zaproxy / community-scripts

A collection of ZAP scripts and tips provided by the community - pull requests very welcome!

DeathShotXD / Comment2Shell

Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker