Tools

an5i/cve-2025-63888-exploit

Security research tool for detecting and testing CVE-2025-63888 (ThinkPHP 5.0.24 File Inclusion RCE vulnerability)

keklick1337/cve-2025-55182-golang-poc

Go-based proof-of-concept for CVE-2025-55182, a critical RCE in React Server Components. Features vulnerability checking, command execution, memory…

0xgh057r3c0n/cve-2026-22812

Python exploit tool for OpenCode RCE (CVE-2026-22812) providing command execution, file read/write/upload/download, and interactive shell for…

nkuty/cve-2025-54322-exploit

Proof-of-concept exploit for CVE-2025-54322, a critical pre-authentication RCE in XSpeeder SXZOS firmware. Provides interactive shell, reverse shell…

vancomycin-g/cve-2022-22947

Exploit tool for CVE-2022-22947 in Spring Cloud Gateway, featuring vulnerability detection, reverse shell, and outbound connectivity testing.

anon-cyber-team/cve-2026-27966--rce-in-langflow

All-in-one exploit tool for CVE-2026-27966, a critical RCE in Langflow. Features mass scanning, auto-detection, payload execution, interactive shell,…

layer-6/cve-2026-5027-langflow

Multi-CVE exploit tool for pre-auth remote code execution on Ivanti Sentry and FortiSandbox. Features interactive shell, webshell deployment,…

micheaol/distccd_rce_cve-2004-2687

Manual exploit script for CVE-2004-2687 (distccd RCE) that spawns a reverse shell via netcat without Metasploit, targeting remote hosts for…

hakkuri01/r2rs

Interactive Ruby shell for authorized CVE-2025-55182 (react2shell) testing

z3n70/cve-2026-24061

Ruby-based exploit for CVE-2026-24061 that executes arbitrary commands on remote targets, supporting multi-threaded scanning and command injection…

r0otk3r/cve-2025-3248

Scanner and exploit for CVE-2025-3248, an unauthenticated RCE in Langflow AI. Includes a vulnerability checker and a reverse shell payload generator…

r0otk3r/cve-2024-1212

Unauthenticated remote command execution exploit for Progress Kemp LoadMaster CVE-2024-1212. Supports proxy interception and output logging for…

alihj98/cve-2024-38063-anonyvader

Exploit tool for CVE-2024-38063, a Windows TCP/IP remote code execution vulnerability, providing proof-of-concept code for security testing and…

snipersmaster/cve-2026-0709

Python proof-of-concept for authenticated command injection in Hikvision wireless APs, enabling remote code execution testing with customizable…

gougou123-hash/cve-2019-12725

Batch scanner and exploit for CVE-2019-12725, a ZeroShell command injection vulnerability. Supports single URL testing, mass scanning, and…

muirlandoracle/cve-2014-6271-ipfire

Python-based remote code execution exploit for CVE-2014-6271 (ShellShock) targeting IPFire <=2.15. Automated exploitation with configurable switches…

varppi/cve-2012-2982

Proof-of-concept exploit for CVE-2012-2982, a remote command execution vulnerability in /file/show.cgi. Demonstrates unauthenticated RCE for security…