Loki
boku7/loki🧙♂️ Node.js Command & Control for Script-Jacking Vulnerable Electron Applications
command-and-controlexploitationids-ips-evasion+5
1.4k5 months ago
boku7/loki🧙♂️ Node.js Command & Control for Script-Jacking Vulnerable Electron Applications
stong/cve-2020-15368CVE-2020-15368, aka "How to exploit a vulnerable driver"
florylsk/recycledinjectorNative syscall shellcode injector using HellsGate/HalosGate/TartarusGate for undetectable execution, with external shellcode loading and EDR evasion…
p33d/cve-2024-45519SMTP vulnerability scanner and exploit script that checks for CVE-2024-45519 and establishes a reverse shell on vulnerable servers.
mrr0b0t19/cve-2024-6387-exploit-pocProof-of-concept exploit for CVE-2024-6387 targeting vulnerable OpenSSH servers via heap manipulation and race condition to achieve remote code…
nu11secur1ty/shelluploadPHP-based web shell uploader for penetration testing, enabling file upload and remote command execution on vulnerable web servers.
tematemaru/cve-2026-31431-simple-testEducational proof-of-concept demonstrating CVE-2026-31431 with a vulnerable target application, demonstration payload, and shellcode extraction…
gartonchan/redis-cve-2025-62507Exploit scripts for CVE-2025-62507, a stack buffer overflow in Redis 8.2.0. Provides x86-64 and ARM64 ROP chain exploits with shellcode generation…
joshuaprovoste/0-click-rce-exploit-for-cve-2024-50526Unauthenticated 0-click RCE exploit for CVE-2024-50526. Exploits an arbitrary file upload vulnerability in a vulnerable WordPress form plugin to…
nxploited/cve-2025-29009WordPress Medical Prescription Attachment Plugin for WooCommerce Plugin <= 1.2.3 is vulnerable to a high priority Arbitrary File Upload
nxploited/cve-2025-32206WordPress Processing Projects Plugin <= 1.0.2 is vulnerable to Arbitrary File Upload
hujiaozhuzhu/cve-2025-55182_liyonPython-based exploit for CVE-2025-55182 (React Server Components RCE) with interactive shell, reverse shell, batch scanning, and Docker-based…
gbonacini/cve-2026-31431Standalone C++/x86-64 assembly implementation of CVE-2026-31431 (Copyfail) for local privilege escalation. Compiles to a dependency-free binary that…
tau-hub/firefox-cve-2016-9079Manual exploit for Firefox RCE CVE-2016-9079 with customizable shellcode, served via HTTP for remote code execution on vulnerable Windows systems.
3x1t1um/cve-2007-2447Python exploit for CVE-2007-2447 that triggers Samba username map script command injection to open a reverse shell on vulnerable targets.
ruycr4ft/cve-2023-38831Proof-of-concept exploit for CVE-2023-38831 targeting vulnerable versions, delivering a reverse shell via automated exploitation.
andwati/cve-2025-24893Python exploit for CVE-2025-24893 that executes a reverse shell on vulnerable web applications, with shell upgrade instructions.
likekabin/cve-2018-10933_sshPython exploit for CVE-2018-10933 that bypasses libssh server authentication and spawns an unauthenticated shell on vulnerable SSH servers.