Tools

hackspeak/cve-2026-67279

Python proof-of-concept scripts for the MikroTrick MikroTik RouterOS SSH takeover chain (CVE-2026-67279, CVE-2026-86060, CVE-2026-67276) for…

d6fault/cve-2026-95675

Python PoC exploiting CVE-2026-95675, an unauthenticated root command injection in D-Link DAP-1360 RevB firmware via a hardcoded auth-bypass and the…

mattgsys/cve-2026-19586

Python PoC exploiting CVE-2026-19586, an unauthenticated command injection in TP-Link Omada SSL VPN that executes arbitrary commands as root via…

r3vpwnx/cve-2025-55182

Standalone exploit for CVE-2025-55182 achieving unauthenticated RCE in Next.js App Router via React Server Components Flight deserialization, with…

jotaespig/cve-2025-66478-poc-reverse-shell

Proof-of-concept exploit for CVE-2025-55182/66478, a React Server Components deserialization RCE, delivering a reverse shell via crafted multipart…

hackedteam/rcs-db

Database components for RCS backend

cerberusmrxi/cve-2025-55182-advanced-react-server-components-rce-exploit

Advanced React Server Components RCE scanner for CVE-2025-55182. Features: multi-stage fingerprinting, vulnerability verification, DNS exfiltration,…

nccgroup/thetick

A simple embedded Linux backdoor.

spiralbl0ck/bios-stuff-related-programming

Final OBJECTIVE:BIOS ROOTKIT AND RSHELL USING BIOS NETWORKING STACK

synacktiv/netgear_pwn2own2021

Exploit used against the Netgear R6700v3 during Pwn2Own Austin 2021

gelukcrab/react-server-components-rce

React Server Components 远程代码执行漏洞(CVE-2025-55182)

luoluoqingge/cve-2025-55182

Pre-authentication remote code execution exploit for React Server Components and Next.js via deserialization vulnerability. Supports single-target…

laskdjlaskdj12/cve-2024-29671-poc

This is POC of CVE-2024-29671

zr0n/react2shell

A complete framework for exploiting the vulnerability CVE-2025-55182

dh4v4l8/cve-2025-55182-poc-tool

Automated exploit tool for CVE-2025-55182 in Next.js React Server Components. Enables remote command execution with built-in WAF bypass, custom…

raivenlockdown/web-cli_rce_react2shell

WEB-CLI_RCE_React2Shell is an educational PoC exploit tool for CVE-2025-55182, a critical Prototype Pollution flaw in Next.js applications using…

retr0reg/tenda-ac8v4-rop

Exploits for Tenda Ac8v4 stack-based overflow to Remote-Code Execution via Mipsel Ropping (CVE-2023-33669 - CVE-2023-33675)

litndat/react2shell-poc-cve-2025-55182

PoC scanner and exploit for CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Detects vulnerable servers and executes remote…