unicorn
trustedsec/unicornUnicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…
command-and-controlexploit-frameworksids-ips-evasion+8
3.9k
trustedsec/unicornUnicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell…
ac8999/cve-2025-27636-rce-in-apache-camelPython PoC exploiting CVE-2025-27636, an Apache Camel header injection RCE, supporting command execution, file reads, and reverse shell payloads.
ezramansor/cve-2025-32432-pocA simple PoC on the Remote Code Execution (RCE) Vulnerability of CraftCMS designated as CVE-2025-32432 written in Go
wildwestcybersecurity/cve-2019-5420-poccve-2019-5420 POC simple ruby script
akhmadkholmurodov/react2shell_exploitI created simple react2shell CVE-2025-55182 python exploit
caginkyr/cve-2026-5203Exploit for CVE-2026-5203 in CMS Made Simple, leveraging path traversal and arbitrary file upload to achieve remote code execution with an…
808rsec/cve-2022-22963Simple exploit
0xgunrunner/cve-2025-34085Exploit for CVE-2025-34085
asim-qazi/rce-simplephpblog-biggiedroidCVE-2025-15495 - Arbitrary File Upload Leading to Remote Code Execution (RCE)
g0vguy/cve-2025-61922-pocA simple, educational proof-of-concept script demonstrating the zero-click account takeover vulnerability in the PrestaShop Checkout module…
o0wo0o/cve-2025-24893_shellPython-based exploit script for CVE-2025-24893, targeting web applications with a simple command-line interface for automated exploitation.
ahmedshamsddin/cve-2025-55182Python exploit for CVE-2025-55182 in React Server Components, injecting a shell into Next.js 16.0.6 applications. Includes a vulnerable app for…
sorrence/cve-2021-44228A simple Log4j PoC written in Go
sincidk/cve-2012-2982-exploit-scriptA short and sweet simple exploit script for the CVE-2012-2982 Authenticated RCE vulnerability in the /file/show.cgi/bin endpoint.
immersive-labs-sec/sharepoint-cve-2025-53770-pocC# tool that builds a GZipped, Base64-encoded .NET DataSet payload using LosFormatter to reproduce the SharePoint deserialization RCE chain…
qhxdr-dz/cve-2017-5638Python-based proof-of-concept exploit for CVE-2017-5638, a remote code execution vulnerability in Apache Struts 2, enabling command injection against…
yukinime/cve-2025-34085Automated scanner and exploit for CVE-2025-34085, an unauthenticated RCE in the WordPress Simple File List plugin. Supports multi-target scanning,…
0xgh057r3c0n/cve-2025-34085WordPress Simple File List Unauthenticated RCE Exploit