Tools

diegaccio/craft-cms-exploit

Python exploit for Craft CMS CVE-2023-41892 Remote Code Execution vulnerability, delivering a PHP reverse shell for authorized penetration testing.

ap0dexme0/cve-2024-3273

D-Link NAS Command Execution Exploit

kyukazamiqq/cve-2026-24061

Multi-threaded Telnet vulnerability scanner that exploits CVE-2026-24061 via environment variable injection, verifies root access, and provides an…

squid22/webmin_cve-2019-15107

CVE-2019–15107 - Unauthenticated RCE Webmin <=1.920

87achrafg-stack/cve-2026-6279.py

CVE-2026-6279

can0i0ever0enter/cve-2023-45878

Python exploit for CVE-2023-45878, an unauthenticated arbitrary file upload in Gibbon CMS, enabling RCE via webshell upload and interactive shell…

hackthem/openstamanager_rce_exploit-cve-2026-38751-

OpenSTAManager RCE Exploit (CVE-2026-38751)

byteforgefr/cve-2011-2523

VsFTPd 2.3.4 Backdoor Command Execution

xbz0n/cve-2023-0830

Exploit for EasyNAS version 1.1.0. The vulnerability exploited is a command injection flaw, which requires authentication.

0xdtc/sqlpad-6.10.0-exploit-cve-2022-0944

Refurbish

aleksazatezalo/cve-2020-14882

Exploits Oracle WebLogic Server RCE (CVE-2020-14882) to execute commands on vulnerable targets, capturing output via HTTP listener.

root-shells/cve-2020-14882

CVE-2020-14882 rewritten in PowerShell

shubham-2k1/exploit-cve-2011-2523

Python exploit for VSFTP 2.3.4 backdoor (CVE-2011-2523) that triggers the backdoor and provides shell access on port 6200.

stanleyjobsonau/longbow

CVE-2023-31756 Proof of Concept - Remote Code Execution for Archer V1/V2 Routers

ajdumanhug/cve-2024-21546

This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp, which allows authenticated users to bypass file restrictions…

m3m0o/metabase-pre-auth-rce-poc

This is a script written in Python that allows the exploitation of the Metabase's software security flaw described in CVE-2023-38646.

ztgrace/sticky_keys_hunter

A script to test an RDP host for sticky keys and utilman backdoor.

ihhgimhana/react2shell-cve-2025-55182-poc-reverse-shell

This is an easy to use PoC script to exploit React2Shell-CVE-2025-55182 Nextjs vulnerability. This will help to gain a reverse shell.