Tools

r3kind1e/log4shell-obfuscated-payloads-generator

Generate primary obfuscated or secondary obfuscated CVE-2021-44228 or CVE-2021-45046 payloads to evade WAF detection.

michele0303/undetected-httpx

Stop getting 403 Forbidden. A specialized httpx-like toolkit for WAF evasion.

aardwolfsecurityltd/bulk_403_bypass

Bash script that adds custom HTTP headers to requests for bulk testing of 403 bypass techniques on web applications.

blacktechx011/react2shell

React2Shell: An exploitation framework for CVE-2025-55182 (Next.js/React RCE).

sho-luv/react2shell

CVE-2025-55182 security test kit: CLI scanner + Chrome extension + Nuclei templates + Docker lab.

cybersecurityworks553/log4j-shell-csw

A Proof-Of-Concept Exploit for CVE-2021-44228 vulnerability.

ak3zaidan/trust-decision-security

Reverse Engineer of Trust Decision Chinese Security

xcanwin/cve-2025-55182-react-rce

[漏洞复现] 全球首款基于RSC特性能绕过WAF检测的CVE-2025-55182 React Server RCE 漏洞 EXP。

tc4dy/cve-2026-61511-poc-exploit

CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full…

ejpir/cve-2025-55182-bypass

Header bypass for CVE-2025-55182 (React Server Components RCE).

0xhaggis/imperva_gzip_bypass

Exploit for CVE-2021-45468, an Imperva WAF bypass.

m4xsec/wp2shell-exploit-waf-bypass

WordPress Pre-Auth RCE Exploit + Scanner + WAF Bypass | CVE-2026-63030 + CVE-2026-60137 | Go + Python + Metasploit modules + Docker lab

se1zer/nextjs_exploit_tool

Next.js RSC RCE Exploit Tool (CVE-2025-55182)

tc4dy/cve-2026-60206-poc-exploit

👾 CVE-2026-60206 - Oracle WebLogic SAML Auth Bypass Exploit Framework ⚡Bash & Python versions. Features: --detect safe check, --exploit…

shinthink/cve-2026-8713

Pre-auth path traversal to arbitrary file delete in Avada (Fusion) Builder <= 3.15.3 leading to RCE (CVSS 9.1)

weizman/cve-2020-6519

Proof-of-concept exploit for CVE-2020-6519 - a Chromium zero-day that fully bypasses Content Security Policy (CSP) across platforms, enabling script…

yanoshercohen/react2shell_cve-2025-55182

React2Shell (CVE-2025-55182) Exploit

sud0x00/log4j-cve-2021-44228

CVE-2021-44228