Tools

lucyz1125/cve-2025-55182-next.js-rce

Nextjs RCE Exploit

toramanemre/log4j-rce-detect-waf-bypass

A Nuclei Template for Apache Log4j RCE (CVE-2021-44228) Detection with WAF Bypass Payloads

jmbowes/nextsecurescan

Next.js CVE-2025-29927 Vulnerability Scanner

imbas007/cve-2025-32429-checker

Python-based vulnerability scanner for detecting CVE-2025-32429 SQL injection in XWiki platforms. Supports single/bulk scanning, WAF detection,…

brunoh6/web-threat-mitigation

Hands-on lab on detecting and mitigating web app threats using OWASP ZAP, Burp Suite, and ModSecurity WAF (with OWASP CRS). Case study: Spring4Shell…

hyan0116/next.js-rce-cve-2025-55182

next.js rce exploit

ancs21/react2shell-scanner-rust

Detect CVE-2025-55182 & CVE-2025-66478 in Next.js/RSC applications (Rust)

y0-kan/log4jshell-scan

log4j2 RCE漏洞（CVE-2021-44228)内网扫描器，可用于在不出网的条件下进行漏洞扫描，帮助企业内部快速发现Log4jShell漏洞。

alessiodos/react2shell-scanner

CVE-2025-55182 & CVE-2025-66478 Detection Tool for Next.js RSC RCE

rk-000/log4j_scan_advance

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

commixproject/commix

Automated Αll-in-One OS command injection exploitation tool.

ekultek/whatwaf

Detect and bypass web application firewalls and protection systems

m4ll0k/atlas

Quick SQLMap Tamper Suggester

raghavd3v/crlfsuite

The most powerful CRLF injection (HTTP Response Splitting) scanner.

coreruleset/ftw

YAML-driven framework for testing Web Application Firewall (WAF) rules using OWASP Core Rule Set baselines. Automates regression detection and…

fullhunt/spring4shell-scan

A fully automated, reliable, and accurate scanner for finding Spring4Shell and Spring Cloud RCE vulnerabilities

fullhunt/log4j-scan

A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228

fastly/ftw

Framework for Testing WAFs (FTW!)