harpyTools
jssngc/harpytoolsAutomated Active Directory post-exploitation toolkit for Kerberos ticket extraction, NTLM relay attacks, and lateral movement via NetExec, Impacket,…
command-and-controlexploitationlateral-movement+6
jssngc/harpytoolsAutomated Active Directory post-exploitation toolkit for Kerberos ticket extraction, NTLM relay attacks, and lateral movement via NetExec, Impacket,…
ill-deed/cve-2025-34085-multi-targetMulti-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells…
0-d3y/langflow-rce-exploitRemote Code Execution Exploit for Langflow (CVE-2025-3248) - [ By S4Tech ]
bjrjk/cve-2025-2783Full-chain exploit for CVE-2025-2783 (Ipcz Sandbox Escape & RCE).
cerberusmrxi/cve-2026-48909-joomla-sp-exploitCVE-2026-48909 - Unauthenticated PHP Object Injection to RCE exploit for Joomla SP LMS extension versions <= 4.1.3. Exploits lmsOrders cookie…
caterscam/cve-2026-5524-pocMass exploit toolkit for CVE-2026-5524, an unauthenticated file upload RCE in Divi Form Builder. Features multi-threaded scanning, WAF bypass…
cerberusmrxi/wp-bricks-exploit-cve-2024-25600CVE-2024-25600 - Unauthenticated RCE exploit for WordPress Bricks Builder Theme. Advanced exploitation framework with interactive shell, reverse…
welove88888/cve-2019-2725Python-based exploit for CVE-2019-2725 (Oracle WebLogic) providing command execution and webshell upload targeting versions 10.3.6 and 12.1.3.
sh4den/cve-2022-31814Proof of concept for CVE-2022-31814
saturate/cve-2025-55182-react2shellA bash scanner for detecting CVE-2025-55182 vulnerability in Next.js applications. And a PoC nodejs script
prelearn-code/cve-2024-6387Proof-of-concept exploit for CVE-2024-6387 (regreSSHion) targeting unauthenticated remote code execution in OpenSSH server via signal handler race…
maorbuskila/windows-x64-ratRemote Access Trojan (RAT) for Windows x64 using a combination of vulnerability CVE-2023-38831 (WinRAR < 6.23 vulnerability) and Shellcode…
hujiaozhuzhu/cve-2025-55182_liyonPython-based exploit for CVE-2025-55182 (React Server Components RCE) with interactive shell, reverse shell, batch scanning, and Docker-based…
dahalsamir/cve-2011-2523-exploitPython exploit for vsFTPd 2.3.4 backdoor (CVE-2011-2523) that triggers a hidden shell on port 6200 via a crafted username, enabling remote command…
hakkuri01/r2rsInteractive Ruby shell for authorized CVE-2025-55182 (react2shell) testing
luoqichen/cve-2025-55182-pocGo-based scanner and exploitation tool for CVE-2025-55182 (Next.js RCE). Supports batch scanning, command execution, Godzilla memory shell injection,…
orf53975/rig-exploit-for-cve-2018-8174Rig Exploit for CVE-2018-8174 As with its previous campaigns, Rig’s Seamless campaign uses malvertising. In this case, the malvertisements have a…
moisestapia/cve-2022-3218Python exploit for CVE-2022-3218 that generates a reverse TCP payload via msfvenom and delivers it over HTTP to a target Windows host.