Tools

junnythemarksman/cve-2023-30547

Python exploit for CVE-2023-30547 vm2 sandbox escape vulnerability. Generates base64-encoded JSON payload to open a reverse shell from vulnerable…

assassinukg/cve-2020-8165

Python exploit shell for CVE-2020-8165, providing a reverse shell payload for remote code execution on vulnerable Rails applications.

any3ite/cve-2023-38646-metabase-reverseshell

Go-based exploit for CVE-2023-38646 in Metabase, enabling remote code execution and reverse shell connection to an attacker-controlled host.

isabelacostaz/cve-2019-0708-poc

Working proof-of-concept exploit for CVE-2019-0708 (BlueKeep) that spawns a remote shell on vulnerable Windows systems. Run with Python 3.

ccievoice2009/cve-2023-46604

Exploit for CVE-2023-46604 in Apache ActiveMQ, enabling remote code execution via crafted XML payloads and reverse shell establishment.

ravid-checkmarx/cve-2021-44228-apache-log4j-rce-main

Proof-of-concept exploit for CVE-2021-44228 (Log4Shell) with JNDI LDAP/RMI injection, payload compilation, and WAF bypass techniques for testing…

cuanh2333/cve-2023-46604

PoC exploit for CVE-2023-46604 targeting Apache ActiveMQ, delivering a reverse shell via crafted XML payload over HTTP.

nxploited/cve-2024-50498

Exploit script for CVE-2024-50498 code injection in WordPress WP Query Console that checks vulnerability and delivers a reverse shell.

swammers8/wbce-v1.6.3-authenticated-rce

Authenticated RCE exploit for WBCE CMS <= 1.6.3 that creates a malicious module zip with a PHP reverse shell and netcat listener.

elphon/cve-2007-2447-exploit

Python exploit for Samba smbd 3.0.20 (CVE-2007-2447) enabling remote command execution and reverse shell via crafted SMB requests.

mustafa1986/cve-2022-22963

Python exploit for CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function, enabling arbitrary command execution via the…

gazettel/cve-2020-24186

Exploit script for CVE-2020-24186 in WordPress that uploads a camouflaged PHP webshell and provides interactive or reverse shell access with optional…

y1s4s/cve-2024-36401-poc

Proof-of-concept exploit for CVE-2024-36401 enabling remote code execution via HTTP requests with reverse shell payload generation and Base64…

scirusvulgaris/cve-2017-12617

Python exploit for Apache Tomcat CVE-2017-12617 RCE vulnerability. Checks targets, generates webshells, and provides remote shell access on systems…

ninhpn1337/cve-2024-22274

Exploit for CVE-2024-22274 that creates a privileged user and spawns a root SSH shell on a target host using provided credentials.

dustblessnotdust/cve-2024-25180

Python exploit script for CVE-2024-25180, a remote code execution vulnerability in pdfmake, delivering a reverse shell via crafted POST requests.

h3x0v3rl0rd/freepbx-reverse-shell-module

Exploit module for FreePBX delivering a reverse shell payload to achieve remote command execution and persistent shell access, designed for…