struts2-tool
gu-007/struts2-toolStruts2 S2-045/S2-046 CVE-2017-5638 detection & exploitation tool
command-and-controlexploitationpayload-development+5
gu-007/struts2-toolStruts2 S2-045/S2-046 CVE-2017-5638 detection & exploitation tool
machine1337/pyobfuscateA simple and efficent script to obfuscate python payloads to make it completely FUD
jotaespig/cve-2025-66478-poc-reverse-shellProof-of-concept exploit for CVE-2025-55182/66478, a React Server Components deserialization RCE, delivering a reverse shell via crafted multipart…
e4zyy/project-cve-2026-33017CVE-2026-33017 - Langflow Unauthenticated RCE Exploit
hypnguyen1209/cve-2026-63520Exploit chain for unauthenticated RCE on Microsoft SharePoint, combining a JWT authentication bypass with unsafe .NET type instantiation to achieve…
gouldnicholas/cve-2026-7669-pocPoC for CVE-2026-7669: SGLang silent trust_remote_code override -> RCE
theexploiters/cve-2024-27115-exploitExploit For SOPlanning 1.52.01 (Simple Online Planning Tool) - Remote Code Execution (RCE) (Authenticated)
imjdl/cve-2026-31816-rshellExploits CVE-2026-31816 in Budibase to bypass authentication, upload a malicious datasource plugin, and execute a reverse shell for remote access.
xiaolichan/invoke-samspoofingCVE-2021-42287/CVE-2021-42278 exploits in powershell
thejoyofhacking/cube0x0-cve-2021-1675Impacket-based exploit for CVE-2021-1675/34527 (PrintNightmare) enabling remote or local DLL execution on vulnerable Windows systems, with scanning…
simoesctt/ctt-mailpit-rce-v1.0---temporal-resonance-mail-server-takeoverExploit tool that transforms SMTP header injection into remote code execution with self-propagating worm capabilities, featuring persistence…
null200ok/cve-2026-3228Scans and exploits CVE-2026-3228, a stored XSS in NextScripts WordPress plugin, with pre-auth detection, authenticated checks, and payload injection…
xshysjhq/cve-2026-34197-payload-apache-activemq-Exploit script for CVE-2026-34197, targeting Apache ActiveMQ's Jolokia API to achieve remote code execution via malicious Spring XML configuration,…
h1sok444/cve-2026-23744-pocProof-of-concept exploit for CVE-2026-23744, targeting /api/mcp/connect to achieve remote command execution on Linux systems via reverse shell.
tibbersv6/cve-2026-21440-poc-expProof-of-concept exploit for CVE-2026-21440, enabling file upload and remote command execution on Windows web servers with built-in sensitive path…
toxy4ny/bl00dym4ryEducational trojan simulator for cybersecurity training, simulating phishing attacks with social engineering, system reconnaissance, anti-sandbox…
nettitude/runpeC# Reflective loader for unmanaged binaries.
cxyofficial/x200-cve-2026-43499Exploit tool targeting CVE-2026-43499 with automated payload delivery and vulnerability verification for penetration testing engagements.