Tools

yxl2001/cve-2023-38646

PoC exploit for CVE-2023-38646, a pre-authentication RCE in Metabase. Includes a reverse shell payload generator with base64 encoding fix for…

kirinse/cve-2023-42115

Python-based exploit and reverse shell payload generator for CVE-2023-42115, featuring scan and exploit modes with cross-platform payload creation.

bkreisel/cve-2022-23935

🐍 Python Exploit for CVE-2022-23935

ahmed-fa7im/cve-2023-38831-winrar-expoit-simple-poc

CVE-2023-38831 winrar exploit generator and get reverse shell

watchtowrlabs/watchtowr-vs-oracle-e-business-suite-cve-2025-61882

Generates detection artifacts for Oracle E-Business Suite CVE-2025-61882 by serving a reverse shell payload to verify pre-auth RCE.

ericisnotrealname/cve-2018-8174_exp

Python-based exploit generator for CVE-2018-8174, producing malicious RTF files delivered via HTML pages with reverse shell callback capability.

faisalfs10x/webmin-cve-2022-0824-revshell

Post-authentication reverse shell exploit for Webmin <=1.984 leveraging CVE-2022-0824 File Manager privilege escalation. Downloads and executes a CGI…

p33d/cve-2024-45519

SMTP vulnerability scanner and exploit script that checks for CVE-2024-45519 and establishes a reverse shell on vulnerable servers.

bigb0x/cve-2024-36401

POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.

nikn0laty/exploit-for-dolibarr-17.0.0-cve-2023-30253

Reverse Shell POC exploit for Dolibarr <= 17.0.0 (CVE-2023-30253), PHP Code Injection

0xjessie21/cve-2025-24016

Standalone CLI exploit for Wazuh's unsafe deserialization vulnerability, allowing remote code execution by injecting crafted DAPI dictionaries to…

j0ey17/cve-2022-22963_reverse-shell-exploit

CVE-2022-22963 is a vulnerability in the Spring Cloud Function Framework for Java that allows remote code execution. This python script will verify…

tecxx/cve-2025-59287-wsus

PowerShell proof-of-concept exploit for CVE-2025-59287 targeting WSUS servers. Automates payload generation with ysoserial.net and triggers a reverse…

cybervaca/cve-2019-16113

Python exploit script for CVE-2019-16113, an authenticated remote code execution vulnerability in Bludit CMS 3.9.2+, with reverse shell payload…

misterxid/watchguard_cve-2022-26318

Proof-of-concept exploit for CVE-2022-26318, a remote code execution vulnerability in WatchGuard XTM and FireWare OS, delivering a reverse shell via…

malw0re/cve-2025-49132-mods

Automated exploit for CVE-2025-49132, a critical unauthenticated RCE in Pterodactyl Panel. Leverages LFI via locale endpoint to deploy persistent web…

k4nfr3/cve-2024-9474

Python exploit script for CVE-2024-9474 targeting PAN-OS SSL VPN, enabling remote code execution and reverse shell deployment for penetration testing.