Tools

dr-iman/cve-2018-7600-drupal-0day-rce

Perl-based remote code execution exploit targeting CVE-2018-7600 in Drupal CMS, enabling payload upload and server compromise.

0x7n6/cve-2022-24500

Standalone exploit for CVE-2022-24500 targeting Windows SMB, generating and executing shellcode to deliver a reverse Meterpreter payload.

ahmed-fa7im/cve-2023-38831-winrar-expoit-simple-poc

CVE-2023-38831 winrar exploit generator and get reverse shell

fengzihk/cve-2020-17530-strust2-061

Exploit for CVE-2020-17530 (Apache Struts2 S2-061) vulnerability. Provides remote code execution payload generation and testing against vulnerable…

johnjohnsp1/cve-2014-4113

PowerShell-based exploit for CVE-2014-4113 targeting x64 Windows systems with remote payload download and execution.

ajdumanhug/cve-2024-21546

This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp, which allows authenticated users to bypass file restrictions…

itsnee/follina-cve-2022-30190-poc

Proof-of-concept exploit for CVE-2022-30190 (Follina) that generates malicious Word documents with remote payload hosting for calc.exe execution.

m00zh33/cve-2018-3191

Proof-of-concept exploit for CVE-2018-3191 targeting WebLogic Server via JNDI injection. Delivers a JAR payload to trigger remote code execution…

magicpipersec/wps-cve-2022-24934

PoC exploit server for CVE-2022-24934 that delivers a malicious payload via a fake WPS Update Server, targeting the wpsupdate.exe process for…

abrewer251/cve-2024-21762_fortinet_poc

Proof-of-concept scanner targeting CVE-2024-21762 in FortiOS SSL VPN’s /remote/hostcheck_validate endpoint with reverse shell payload delivery.

yesspider-hacker/log4j-payload-generator

log4j-paylaod generator : A generic payload generator for Apache log4j RCE CVE-2021-44228

saadhassan77/cve-2025-64512---pdfminer.six-remote-code-execution-rce-

Exploit PoC for CVE-2025-64512 targeting insecure deserialization in pdfminer.six. Generates malicious pickle payload and produces exploit PDFs for…

shishirghimir/cve-2024-53677-exploit

Automated Python exploit script for CVE-2024-53677 with JSP web payload delivery, enabling targeted vulnerability exploitation and penetration…

byteboycn/cve-2021-44228-apache-log4j-rce

Exploit for CVE-2021-44228 (Log4Shell) with RMI server and payload delivery for remote code execution against vulnerable Apache Log4j instances.

immersive-labs-sec/sharepoint-cve-2025-53770-poc

C# tool that builds a GZipped, Base64-encoded .NET DataSet payload using LosFormatter to reproduce the SharePoint deserialization RCE chain…

joshuaprovoste/0-click-rce-exploit-for-cve-2024-50526

Unauthenticated 0-click RCE exploit for CVE-2024-50526. Exploits an arbitrary file upload vulnerability in a vulnerable WordPress form plugin to…

shadowshusky/cve-2017-11882-

Exploit generator for CVE-2017-11882, crafting malicious RTF documents that execute arbitrary commands or shellcode via the Equation Editor…