Tools

nxploited/cve-2024-50498

Exploit script for CVE-2024-50498 code injection in WordPress WP Query Console that checks vulnerability and delivers a reverse shell.

y1ld1r1m-1337/limesurvey-rce

LimeSurvey Authenticated RCE

h3x0v3rl0rd/freepbx-reverse-shell-module

Exploit module for FreePBX delivering a reverse shell payload to achieve remote command execution and persistent shell access, designed for…

h3x0v3rl0rd/nodejsshell

Node.js reverse shell payload generator for penetration testing. Creates bind and reverse shells in JavaScript.

h3x0v3rl0rd/nim-reverse-shell

nim-reverse-shell

watchtowrlabs/watchtowr-vs-oracle-e-business-suite-cve-2025-61882

Generates detection artifacts for Oracle E-Business Suite CVE-2025-61882 by serving a reverse shell payload to verify pre-auth RCE.

r0otk3r/cve-2025-3248

Scanner and exploit for CVE-2025-3248, an unauthenticated RCE in Langflow AI. Includes a vulnerability checker and a reverse shell payload generator…

ruycr4ft/cve-2023-38831

Proof-of-concept exploit for CVE-2023-38831 targeting vulnerable versions, delivering a reverse shell via automated exploitation.

substing/cve-2020-24186_reverse_shell_upload

Exploit for CVE-2020-24186 in WordPress wpDiscuz 7.0.4 that uploads a reverse PHP shell for remote code execution.

razzlemouse/f5-big-ip-smuggleshell-cve-2023-46747-exploit

#F5-BIG-IP-CVE-2023-46747-Exploit – Unauthenticated RCE Python exploit & Nuclei template by Raguraman ✓ Automated TCP reverse shell (LHOST/LPORT)…

libertycityhacker/cve-2023-43364-exploit-cve

Python exploit script targeting CVE-2023-43364 in Searchor 2.4.0, leveraging insecure eval() for remote code execution with a built-in reverse shell…

passwa11/cve-2023-29017-reverse-shell

Reverse shell exploit for CVE-2023-29017, enabling remote code execution on vulnerable web applications for authorized penetration testing.

s1lentf00thold/cve-2021-21425-rce

Python exploit script for CVE-2021-21425 targeting Grav CMS admin panel, delivering a reverse shell via HTTP POST request with configurable LHOST and…

t3l3machus/hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

k4nfr3/cve-2024-9474

Python exploit script for CVE-2024-9474 targeting PAN-OS SSL VPN, enabling remote code execution and reverse shell deployment for penetration testing.

junnythemarksman/cve-2021-31630

Modified proof-of-concept exploit for CVE-2021-31630 targeting a web application vulnerability with reverse shell payload generation and remote code…

jpeanut/imagetragick-cve-2016-3714-rshell

Proof-of-concept exploit scripts for CVE-2016-3714 (ImageTragick) using MVG/SVG files to deliver reverse shells via bash, nc, and PHP for ethical…