Tools

jas502n/cve-2018-1273

Python-based exploit for CVE-2018-1273 (Spring Data Commons RCE) with interactive command shell and HTTP POST payload injection for penetration…

cyberbutler/reddrop

Python Flask web server for capturing, processing, and logging encoded/encrypted payloads and tar archives, designed for penetration testers and red…

dragoneeg/struts2-048

Python-based proof-of-concept exploit for CVE-2017-9791 (Apache Struts2 S2-048) with check and command execution modes for penetration testing.

jaky5155/cve-2019-0708-exp

Exploit for CVE-2019-0708 (BlueKeep) targeting Windows RDP vulnerabilities in XP and 7, enabling remote code execution for penetration testing.

jpeanut/imagetragick-cve-2016-3714-rshell

Proof-of-concept exploit scripts for CVE-2016-3714 (ImageTragick) using MVG/SVG files to deliver reverse shells via bash, nc, and PHP for ethical…

k8gege/cve-2021-40444

Exploit toolkit for CVE-2021-40444 MSHTML remote code execution, featuring DLL payload generation, Office document crafting, and lateral movement…

iss4cf0ng/eden-rat

An open-source Linux GUI-based Remote Access Tool developed in C# with a Python payload, intended for legitimate penetration testing and…

rmikehodges/hidensneak

a CLI for ephemeral penetration testing

keven1z/cve-2021-22205

Python exploit script for CVE-2021-22205 (GitLab RCE) with command execution and reverse shell capabilities. Supports one-click getshell for…

subc0ol/apache-struts2-rce-exploit-v2-cve-2017-5638

Automated remote code execution exploit for Apache Struts2 (CVE-2017-5638) with auto-exploitation capabilities for penetration testing and…

jasperla/cve-2017-9101

Authenticated remote code execution exploit for PlaySMS 1.4 via CSV phonebook upload. Provides single-command and interactive shell modes for…

mostafasoliman/oracle-oam-padding-oracle-cve-2018-2879-exploit

Padding oracle exploit for Oracle Access Manager (CVE-2018-2879) enabling decryption of encrypted cookies and encryption of arbitrary plaintext for…

k4nfr3/cve-2024-9474

Python exploit script for CVE-2024-9474 targeting PAN-OS SSL VPN, enabling remote code execution and reverse shell deployment for penetration testing.

encrypter15/cve-2025-50165-x64-exploit

Generates weaponized JPEG files exploiting CVE-2025-50165 (Windows Graphics RCE) with custom x64 shellcode, heap spray, ROP chain, and AV/EDR evasion…

jimmexploit/cve-2024-37054-poc

Proof-of-concept exploit for CVE-2024-37054, a critical deserialization vulnerability in MLflow. Includes a full exploit script and a malicious model…

atithkhawas/autoblue

AutoBlue - Automated EternalBlue (CVE-2017-0144 / MS17-010) exploitation tool leveraging Nmap and Metasploit for ethical hacking, penetration…

crackercat/cve-2021-44228-log4j-payloads

Collection of payloads for exploiting the Log4j remote code execution vulnerability (CVE-2021-44228), including JNDI injection strings and bypass…