Notice

In the end, I still felt that having separate scripts for each vulnerability was very inconvenient, so I integrated all poc and exp scripts into one, enabling one-click scanning + exploitation. Since I've been working on integration recently, Exphub has not been updated for a long time. The integrated version is nearing completion and will be released in October (after the holiday). Stay tuned
Already released ---> https://github.com/zhzyker/vulmap

Exphub

Exphub [Vulnerability Exploit Script Library] (Star ⭐~)
Currently includes exploit scripts for Weblogic, Struts2, Tomcat, and Drupal. All scripts have been tested and are usable. We strive to provide documentation for all scripts and prioritize updating high-risk and easily exploitable vulnerabilities.
Some scripts or files are collected. If there are copyright claims, contact us and we will remove them immediately.
QQ Group: 219291257
bilibili: https://space.bilibili.com/64648363

Last updated: 2021/04/04, latest addition cve-2021-26295_rce.py

Readme

Exphub includes files of various names, types, formats, and extensions. These files can be roughly categorized into [Vulnerability Verification Scripts], [Exploit Scripts], [Remote Command Execution Scripts], [Shell Interactive Scripts], and [Webshell Upload Scripts].
Script file example: cve-1111-1111_xxxx.py

Script file types [xxxx]:

• cve-1111-1111_poc [Vulnerability Verification Script] Only checks if the vulnerability exists
• cve-1111-1111_exp [Exploit Script] For common vulnerabilities such as file inclusion, arbitrary file reading, etc. For specific usage of each script, refer to [Usage]
• cve-1111-1111_rce [Remote Command Execution Script] Command execution exploit script, non-interactive
• cve-1111-1111_cmd [Remote Command Execution Script] Command execution exploit script, non-interactive
• cve-1111-1111_shell [Remote Command Execution Script] Directly reverses a shell, or provides a simple interactive shell for passing commands, basic interaction
• cve-1111-1111_webshell [Webshell Upload Script] Automatically or manually upload Webshell

Script file formats [py]:

• cve-xxxx.py Python file, includes py2 and py3. Check the description for version specifics (visible upon execution). Recommended py2.7 and py3.7
• cve-xxxx.sh Shell script, requires Linux environment. Run to see description, no distribution requirement
• cve-xxxx.jar Java file, execution method: java -jar cve-xxxx.jar. Recommended Java 1.8.121
• cve-xxxx.php PHP file, execute directly with the php command
• cve-xxxx.txt Vulnerability payload that cannot be written as an executable file, will be written as txt text, recording how to use it (usually GET/POST requests

Fastjson

fastjson-1.2.24_rce.py Fastjson <=1.2.24 Deserialization Remote Command Execution Vulnerability
fastjson-1.2.41_rce.py Fastjson <=1.2.41 Deserialization Remote Command Execution Vulnerability
fastjson-1.2.42_rce.py Fastjson <=1.2.42 Deserialization Remote Command Execution Vulnerability
fastjson-1.2.43_rce.py Fastjson <=1.2.43 Deserialization Remote Command Execution Vulnerability
fastjson-1.2.45_rce.py Fastjson <=1.2.45 Deserialization Remote Command Execution Vulnerability
fastjson-1.2.47_rce.py Fastjson <=1.2.47 Deserialization Remote Command Execution Vulnerability [Usage]
fastjson-1.2.62_rce.py Fastjson <=1.2.62 Deserialization Remote Command Execution Vulnerability
fastjson-1.2.66_rce.py Fastjson <=1.2.66 Deserialization Remote Command Execution Vulnerability

Weblogic

cve-2014-4210_ssrf_scan.py Weblogic SSRF Internal Network Port Scanning Exploit Script [Usage]
cve-2014-4210_ssrf_redis_shell.py Weblogic SSRF Vulnerability Internal Network Unauthorized Redis Getshell Script [Usage]
cve-2017-3506_poc.py Weblogic wls-wsat Remote Command Execution Vulnerability Detection Script [Usage]
cve-2017-3506_webshell.jar Weblogic wls-wsat Remote Command Execution Vulnerability Exploit, Upload Webshell [Usage]
cve-2017-10271_poc.jar Weblogic wls-wsat XMLDecoder Deserialization Vulnerability [Usage]
cve-2017-10271_webshell.jar Weblogic wls-wsat XMLDecoder Deserialization Vulnerability Exploit Script [Usage]
cve-2018-2628_poc.py Weblogic WLS Core Components Deserialization Command Execution Vulnerability Verification Script [Usage]
cve-2018-2628_webshell.py Weblogic WLS Core Components Command Execution Vulnerability Upload Webshell Script [Usage]
cve-2018-2893_poc.py WebLogic WLS Core Component Deserialization Vulnerability Detection Script
cve-2018-2893_cmd.py WebLogic WLS Core Component Deserialization Vulnerability Exploit Script
cve-2018-2894_poc_exp.py Weblogic Arbitrary File Upload Vulnerability Detection + Exploitation
cve-2019-2618_webshell.py Weblogic Arbitrary File Upload Vulnerability (Requires Account Password) [Usage]
cve-2020-2551_poc.py Weblogic IIOP Deserialization Vulnerability Detection Script
cve-2020-2555_cmd.py WebLogic GIOP Protocol Deserialization Remote Command Execution
cve-2020-2883_cmd.py WebLogic T3 Protocol Deserialization Remote Command Execution
cve-2020-14882_rce.py WebLogic Console Unauthorized Command Execution

Shiro

shiro-1.2.4_rce.py Apache Shiro rememberMe < 1.2.4 RCE exploit script

Solr

cve-2017-12629_cmd.py Apache Solr Remote Command Execution Script
cve-2019-0193_cmd.py Apache Solr DataImportHandler Remote Code Execution Vulnerability Exploit Script
cve-2019-17558_cmd.py Apache Solr Velocity Remote Code Execution Vulnerability Exploit Script [Video_Bilibili] [Video_YouTube]

Spring

cve-2018-1273_cmd.py Spring Remote Code Execution Vulnerability Exploit Script