n0m-d / tools

n0m-d / tools

/

n0m-d/ DVAPI

Damn Vulnerable API (DVAPI) is an intentionally vulnerable API application designed for learning, practicing, and testing API security concepts

apisec graphql jwt go smtp

Go public Published Jul 27, 2026
n0m-d/ CVE-2021-40438-POC

CVE-2021-40438 - SSRF Exploit

cve ssrf poc

Python public Published Jun 10, 2026
n0m-d/ JWE-PTLab

Python script for the PentesterLab JWE exercise - exploits JWE vulnerabilities to gain admin access.

pentesterlab capture-the-flag jwt

Python public Published May 6, 2026
n0m-d/ Luhn-Ruxcon-SQLi

Boolean-based blind SQL injection via Luhn-valid credit card payloads

pentesterlab capture-the-flag sql-injection

Python public Published May 3, 2026
n0m-d/ EnumSMTPGo

A SMTP user enumeration tool written in Go. This tool helps in identifying valid email addresses on an SMTP server by analyzing the server's response to RCPT, VRFY and EXPN commands.

smtp enumeration poc go

Go private Published Dec 17, 2025
n0m-d/ CVE-2018-0114 Proof of Concept

To generate a JWT with the claim "admin", run the following command in the project directory

cve jwt poc go

Python public Published Aug 14, 2025

Per page Showing 1–5 of 6

Page 1 of 2