Tools

leo-mitch/cve-2024-41570-havoc-c2-rce

This is a Chained RCE in the Havoc C2 framework using github.com/chebuya and github.com/IncludeSecurity pocs

jakabakos/cve-2022-40127-airflow-rce

Proof-of-concept exploit for CVE-2022-40127 targeting Apache Airflow RCE via crafted run_id parameter, with automated reverse shell delivery.

ap0dexme0/cve-2024-23897

Perform with massive Jenkins Reading-2-RCE

0xdak/cve-2026-9198_exploit

Unauthenticated RCE exploit for Langflow OSS chaining auto_login JWT bypass with validate/code exec() to achieve remote command execution and reverse…

aancw/cve-2022-1388-rs

CVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust

gustavorobertux/gotigate

Go-based exploit for CVE-2022-40684 targeting Fortinet FortiGate devices. Automates authentication bypass to gain administrative access via the web…

erick-duarte/cve-2024-24386

Proof-of-concept exploit for a command injection vulnerability in VitalPBX Task Manager module, demonstrating reverse shell payload delivery via cron…

anon-cyber-team/cve-2026-27966--rce-in-langflow

All-in-one exploit tool for CVE-2026-27966, a critical RCE in Langflow. Features mass scanning, auto-detection, payload execution, interactive shell,…

oditynet/sleepall

trojan CVE-2024-28085 CVE 28085

ph-arm/cve-2021-22204-gitlab

Modification of gitlab exploit anything under 13.10

swiftsecur/teamcity-exploit-cve-2023-42793

teamcity-exploit-cve-2023-42793

dhananjayasj/cve-2026-34156-nocobase-sandbox-escape-via-workflow-execution-vulnerability-

Authenticated RCE exploit for NocoBase workflow engine sandbox escape (CVE-2026-34156). Executes arbitrary system commands via crafted workflow…

cylock11/cve-2026-23744

Proof-of-concept exploit for CVE-2026-23744, an unauthenticated command injection in MCP Connect leading to remote code execution and reverse shell.

delt-a/cve-2024-36401-poc

Unauthenticated RCE exploit for GeoServer (CVE-2024-36401) via OGC filter XPath injection. Supports reverse shell and blind command execution with…

wise-security/cve-2025-69600

Demonstrates command injection vulnerabilities in RayVentory Scan Engine's rvia tool, allowing arbitrary command execution via getconfig, upload,…

e1st/cve-2025-56015

Proof-of-concept exploit for CVE-2025-56015, a sandbox escape and RCE in GenieACS. Automates malicious provision creation, preset mapping, and…

micheaol/distccd_rce_cve-2004-2687

Manual exploit script for CVE-2004-2687 (distccd RCE) that spawns a reverse shell via netcat without Metasploit, targeting remote hosts for…

iwallplace/cve-2026-46368-openwrt-exploit

Proof of Concept exploit for CVE-2026-46368 — authenticated root command injection in OpenWrt luci-app-https-dns-proxy (EDB-52521)