Tools

sijido/cve-2022-22947

Python-based memory shell injection tool for CVE-2022-22947, supporting Spring, Netty, and Godzilla memory shells with simple CLI usage.

adel-hx0d/cve-2006-3392

It is a simple tool to exploit local file include . vulnerabilities

ipsbruno/cve-2022-1162

Exploit tool for CVE-2022-1162 that enumerates GitLab users and performs authentication bypass via a crafted login request.

telekom-security/explo

Human and machine readable web vulnerability testing format

angelusrivera/cve-2025-49844

Scanner and educational guide for CVE-2025-49844 (RediShell), a Redis Lua scripting use-after-free vulnerability. Checks Redis servers for exposure,…

jonasuliana/cve-2017-8759

Simple C# implementation of CVE-2017-8759

77philly/cve-2024-7456scripts

Bash and Node.js scripts to automate SQL injection exploitation against vulnerable web applications, targeting CVE-2024-7456.

b-abderrahmane/cve-2021-44228-playground

Docker-based lab to validate CVE-2021-44228 (Log4Shell) in Java apps, test mitigations, and simulate RCE via LDAP and HTTP payloads.

vedantrana73/cve-2019-9053-py3

Unauthenticated time-based blind SQL injection exploit for CMS Made Simple ≤ 2.2.9 (CVE-2019-9053), ported to Python 3.

la3b0z/cve-2025-24813-poc

CVE-2025-24813-POC JSP Web Shell Uploader

drackyjr/cve-2020-15778-scp-command-injection-check

This script is a safe and simple tool that helps system users, students, and administrators check if their SCP (Secure Copy) client is vulnerable to…

caybermods/cve-2026-22812-poc

Python tool to check and exploit CVE-2026-22812 in OpenCode, supporting command execution, file read, and multi-target scanning on ports 4095-4100.

immersive-labs-sec/sharepoint-cve-2025-53770-poc

C# tool that builds a GZipped, Base64-encoded .NET DataSet payload using LosFormatter to reproduce the SharePoint deserialization RCE chain…

jenderal92/livewire-vuln-scanner

Simple scanner to detect vulnerable Livewire installations.

maradonam18/-cve-2025-59528-poc

A simple python script to exploit CVE-2025-59528, this an Authenticated RCE vulnerability in Flowise application, a popular AI tool. That is also…

4nth0ny1130/shisoserial

一个针对shiro反序列化漏洞(CVE-2016-4437)的快速利用工具/A simple tool targeted at shiro framework attacks with ysoserial.

amoloht/cve-2022-26134

Python exploit for CVE-2022-26134, an OGNL injection in Confluence Server and Data Center, allowing unauthenticated remote code execution. Provides a…

vladrico/cve-2019-19781

Shitrix : CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit