Tools

n3m1sys/cve-2018-16763-exploit-python3

Python 3 exploit for FuelCMS 1.4.1 Remote Code Execution (CVE-2018-16763). Unauthenticated RCE via crafted HTTP requests for penetration testing and…

dh4v4l8/cve-2025-55182-poc-tool

Automated exploit tool for CVE-2025-55182 in Next.js React Server Components. Enables remote command execution with built-in WAF bypass, custom…

chrisbarack/cve-2025-55182

Technical penetration testing writeup demonstrating exploitation of CVE-2025-55182 in Next.js, credential harvesting from SQLite, and privilege…

lincolino/lab-annie

Automates exploitation of CVE-2020-13160, a critical remote code execution vulnerability in AnyDesk 5.5.2, enabling penetration testers to validate…

0xgh057r3c0n/cve-2026-22812

Python exploit tool for OpenCode RCE (CVE-2026-22812) providing command execution, file read/write/upload/download, and interactive shell for…

ghxstsec/cve-2026-39987

Exploit for Marimo pre-auth RCE via terminal WebSocket, providing command execution, interactive PTY shell, and reverse shell capabilities for…

ceald1/evilwinrm-ng

Go-based WinRM client for remote command execution and lateral movement on Windows systems during penetration tests.

layer-6/cve-2026-5027-langflow

Multi-CVE exploit tool for pre-auth remote code execution on Ivanti Sentry and FortiSandbox. Features interactive shell, webshell deployment,…

diamorphine666/cve-2026-33017-exploit

Exploit for unauthenticated remote code execution in Langflow <1.9.0 via the build_public_tmp endpoint, delivering a reverse shell for authorized…

lpyydxs/cve-2021-40539

Exploit for CVE-2021-40539: RCE in Zoho ManageEngine ADSelfService Plus. Includes detection script, Fofa search syntax, and webshell deployment for…

doaso/cve-2023-42115

Remote code execution exploit for Exim AUTH out-of-bounds write vulnerability (CVE-2023-42115). No authentication required; includes build and usage…

gitcollect/jboss-autopwn

Automated JBoss exploitation script deploying JSP shells with bind/reverse shell, Meterpreter, and VNC support for penetration testing.

z3n70/cve-2026-24061

Ruby-based exploit for CVE-2026-24061 that executes arbitrary commands on remote targets, supporting multi-threaded scanning and command injection…

micheaol/distccd_rce_cve-2004-2687

Manual exploit script for CVE-2004-2687 (distccd RCE) that spawns a reverse shell via netcat without Metasploit, targeting remote hosts for…

jagg3rsec/cve-2014-6287

Exploit implementation for CVE-2014-6287, targeting a remote code execution vulnerability in a web application. Provides a proof-of-concept for…

muirlandoracle/cve-2014-6271-ipfire

Python-based remote code execution exploit for CVE-2014-6271 (ShellShock) targeting IPFire <=2.15. Automated exploitation with configurable switches…

gumerzzzindo/cve-2024-47176

Python exploit for CVE-2024-47176 achieving remote command execution in CUPS cups-browsed via crafted UDP packets. Includes reverse shell payload…