mr-xn/penetration_testing_poc

★ 7,339HTMLAudience · developerComplexity · 3/5Setup · hard

Mindmap

mindmap
  root((Pentest PoC Archive))
    What it does
      CVE reference index
      Exploit collection
      Security write-ups
    Categories
      IoT and routers
      Web applications
      Privilege escalation
      PC software
    Entry Format
      CVE identifier
      PoC script or link
      Write-up reference
    Audience
      Security researchers
      Penetration testers

mindmap root((Pentest PoC Archive)) What it does CVE reference index Exploit collection Security write-ups Categories IoT and routers Web applications Privilege escalation PC software Entry Format CVE identifier PoC script or link Write-up reference Audience Security researchers Penetration testers

Click or tap to explore — scroll the page freely

Things people build with this

USE CASE 1

Look up proof-of-concept code for a specific CVE on a router, camera, or web application when researching a known vulnerability.

USE CASE 2

Find write-ups explaining how a specific IoT or web vulnerability was discovered and reproduced, with links to the original exploit database entries.

USE CASE 3

Reference the tools section for utility scripts useful in penetration testing tasks like batch scanning or credential testing.

Tech stack

HTML

Getting it running

Difficulty · hard Time to first run · 1h+

No unified codebase, each entry links to an external tool or write-up, run any scripts in a virtual environment as some may have unexpected behavior.

The explanation does not mention the license.

In plain English

This repository is a curated archive of proof-of-concept code, scripts, and exploit demonstrations gathered by security researcher Mr-xn. The collection covers a wide range of known software and hardware vulnerabilities, organized by category: IoT devices and routers, web applications, privilege escalation techniques, PC software, and a general-purpose tools section. Everything is intended as reference material for security research and penetration testing. The IoT section is the largest part of the collection. It catalogs vulnerabilities in consumer routers from brands like D-Link, TP-Link, Hikvision, and Huawei, as well as mobile platforms including iOS and Android. Each entry typically links to a write-up, a proof-of-concept script, or an existing exploit database entry, often with the relevant CVE number noted alongside. The web application section covers vulnerabilities in content management systems, authentication bypass techniques, cross-site request forgery issues, and remote code execution flaws. The tools section adds small utility scripts for tasks like batch scanning or credential testing. There is also a section of saved articles and PDF write-ups that explain how specific vulnerabilities were found and reproduced. The README itself is written primarily in Chinese, with CVE identifiers and tool names in English. The repository does not include a unified install process or a single codebase to run. Instead, each entry points outward to a separate tool or write-up, making this a curated index rather than a standalone project. The author notes that all tools should be run in a virtual environment, since some third-party entries may contain unexpected behavior. As of the last commit, the collection spans devices and software dating from roughly 2017 through 2025. The full README is longer than what was shown.

Copy-paste prompts

Prompt 1

I'm doing a penetration test on a D-Link router. Search this repository for D-Link CVEs and summarize the available proof-of-concept entries including what vulnerability class each one covers.

Prompt 2

I need to understand a remote code execution vulnerability in a CMS for a security report. Find the relevant entries in this repo and explain how the exploits work based on the linked write-ups.

Prompt 3

I'm studying privilege escalation techniques for a CTF. What categories of privilege escalation does this repository cover and which entries have working proof-of-concept scripts?

Open on GitHub → Explain another repo

← mr-xn on gitmyhub — every repo by this author, as a profile.

Verify against the repo before relying on details.