This repo contains proof of concept exploits for vulnerabilities I've come across in pentests and CTFs. This goes without saying but I am not liable for any misuse of these scripts, please be responsible.

Exploits

CVE-2023-23752 - Information disclosure in Joomla CMS.
CVE-2025-24893 - RCE in XWiki.
CVE-2025-24071 - Windows Explorer NTLM Hash Disclosure

License

GPLv3 as all good software (or exploits I guess) should be.