Tools

rmhowe425/poc-cve-2025-68613

Proof-of-concept exploit for CVE-2025-68613, an authenticated remote code execution vulnerability in N8N. Executes arbitrary bash commands on…

ctzisme/cve-2026-23744

Proof-of-concept exploit for CVE-2026-23744, demonstrating unauthenticated remote code execution in MCPJam Inspector versions up to 1.4.2 via crafted…

angelusrivera/cve-2025-49844

Scanner and educational guide for CVE-2025-49844 (RediShell), a Redis Lua scripting use-after-free vulnerability. Checks Redis servers for exposure,…

hex-neo/cve-2026-22812-opencode-rce-exp

Java-based proof-of-concept exploit for CVE-2026-22812, a remote code execution vulnerability in OpenCode, demonstrating exploitation with a simple…

calegarimindsec/exploit-cve-2023-22515

Bash script that exploits CVE-2023-22515 in Confluence Data Center and Server to create unauthorized administrator accounts, enabling unauthorized…

h3x0v3rl0rd/php_reverse_shell

Simple PHP reverse shell script for establishing remote command execution on target systems. Ideal for penetration testing and security assessments.

ezramansor/cve-2025-32432-poc

A simple PoC on the Remote Code Execution (RCE) Vulnerability of CraftCMS designated as CVE-2025-32432 written in Go

unknowndevice64/exploits_cve-2019-19781

Remote code execution exploit for Citrix Application Delivery Controller and Gateway (CVE-2019-19781). Executes arbitrary commands on vulnerable…

zecopro/cve-2021-31166

simple bash script for exploit CVE-2021-31166

immersive-labs-sec/sharepoint-cve-2025-53770-poc

C# tool that builds a GZipped, Base64-encoded .NET DataSet payload using LosFormatter to reproduce the SharePoint deserialization RCE chain…

joshuaprovoste/0-click-rce-exploit-for-cve-2024-10924

Unauthenticated authentication bypass to RCE exploit for CVE-2024-10924. Abuses an authentication and 2FA bypass in the Really Simple Security…

nukingdragons/gitlab-cve-2021-22205

A simple bash script that exploits CVE-2021-22205 against vulnerable instances of gitlab

hoseynheydari/fusionpbx_rce_vulnerability

Chain CVE-2019-11408 – XSS in operator panel and CVE-2019-11409 – Command injection in operator panel.

mrjhaxcore/cve-2025-34085

Simple File List – Unauthenticated RCE Exploit (CVE-2025-34085)

w2hcorp/cve-2025-29927-poc

Here is a simple but effective exploit for CVE-2025-29927.

redshift-cybersecurity/cve-2024-41628

Python exploit script for CVE-2024-41628, a Local File Inclusion vulnerability in ClusterControl CMON API (ports 9500/9501). Retrieves arbitrary…

tfrederick74656/cve-2024-3400-poc

Simple POC for CVE-2024-3400

yosef0x01/cve-2022-41544

Exploit script for CVE-2022-41544 - RCE in get-simple CMS