Tools

y1s4s/cve-2024-36401-poc

Proof-of-concept exploit for CVE-2024-36401 enabling remote code execution via HTTP requests with reverse shell payload generation and Base64…

bishben/xwiki-15.10.8-reverse-shell-cve-2025-24893

CVE-2025-24893 RCE exploit for XWiki with reverse shell capability

ccievoice2009/cve-2023-46604

Exploit for CVE-2023-46604 in Apache ActiveMQ, enabling remote code execution via crafted XML payloads and reverse shell establishment.

filipstudeny/-cve-2014-6271-shellshock-remote-command-injection-

[CVE-2014-6271] Apache Shellshock Remote Command Injection tool for quick reverse shell and file browsing

ac8999/cve-2025-27636-rce-in-apache-camel

Python PoC exploiting CVE-2025-27636, an Apache Camel header injection RCE, supporting command execution, file reads, and reverse shell payloads.

blacknbunny/mcreator

Encoded Reverse Shell Generator With Techniques To Bypass AV's

junnythemarksman/cve-2023-30547

Python exploit for CVE-2023-30547 vm2 sandbox escape vulnerability. Generates base64-encoded JSON payload to open a reverse shell from vulnerable…

raffli-dev/cve-2023-41425

Exploit for Wonder CMS XSS to RCE (CVE-2023-41425) with theme upload and reverse shell payloads.

bkreisel/cve-2022-23935

🐍 Python Exploit for CVE-2022-23935

h3x0v3rl0rd/freepbx-reverse-shell-module

Exploit module for FreePBX delivering a reverse shell payload to achieve remote command execution and persistent shell access, designed for…

joxeankoret/cve-2017-7494

Remote root exploit for the SAMBA CVE-2017-7494 vulnerability

h3x0v3rl0rd/nim-reverse-shell

nim-reverse-shell

r0otk3r/cve-2025-3248

Scanner and exploit for CVE-2025-3248, an unauthenticated RCE in Langflow AI. Includes a vulnerability checker and a reverse shell payload generator…

h3x0v3rl0rd/nodejsshell

Node.js reverse shell payload generator for penetration testing. Creates bind and reverse shells in JavaScript.

qianniaoge/cve-2020-14882_exploit_gui

GUI-based exploit tool for CVE-2020-14882 targeting Oracle WebLogic servers. Supports reverse shell payload generation, proxy configuration, and…

prodigiousmind/revshell

Pentestmonkeys' PHP reverse shell with dynamic host and port passing through GET request parameters

nosiume/cve-2025-14700-poc

Proof of Concept for Authenticated RCE in Crafty Controller <= 4.6.1