Tools

dix0nym/cve-2015-6967

Python exploit script for CVE-2015-6967, enabling authenticated arbitrary file upload in Nibbleblog 4.0.3 with custom payload support.

tecxx/cve-2025-59287-wsus

PowerShell proof-of-concept exploit for CVE-2025-59287 targeting WSUS servers. Automates payload generation with ysoserial.net and triggers a reverse…

cybervaca/cve-2019-16113

Python exploit script for CVE-2019-16113, an authenticated remote code execution vulnerability in Bludit CMS 3.9.2+, with reverse shell payload…

jas502n/cve-2018-15982_exp_ie

Exploit generator for CVE-2018-15982 (Adobe Flash Player) that produces SWF and HTML files for remote code execution via crafted Flash objects.

jreppiks/cve-2017-12149

Python script exploiting JBoss Java deserialization RCE (CVE-2017-12149) using ysoserial for dynamic payload generation. Requires Java runtime.

lightr3d/cve-2024-21006_jar

Java-based exploit for CVE-2024-21006, delivering a payload via LDAP to a target IP and port. Includes compiled JAR and source for customization.

likekabin/cve-2018-0802_cve-2017-11882

Proof-of-concept exploit generator for CVE-2017-11882 and CVE-2018-0802, crafting malicious RTF files to execute arbitrary commands on target systems…

dr-iman/cve-2018-7600-drupal-0day-rce

Perl-based remote code execution exploit targeting CVE-2018-7600 in Drupal CMS, enabling payload upload and server compromise.

ahmed-fa7im/cve-2023-38831-winrar-expoit-simple-poc

CVE-2023-38831 winrar exploit generator and get reverse shell

fengzihk/cve-2020-17530-strust2-061

Exploit for CVE-2020-17530 (Apache Struts2 S2-061) vulnerability. Provides remote code execution payload generation and testing against vulnerable…

winrarzipsexploit/cve-2026-27540

Python exploit suite for CVE-2026-27540, an unauthenticated file upload RCE in the WooCommerce Wholesale Lead Capture plugin, with fingerprinting,…

ajdumanhug/cve-2024-21546

This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp, which allows authenticated users to bypass file restrictions…

itsnee/follina-cve-2022-30190-poc

Proof-of-concept exploit for CVE-2022-30190 (Follina) that generates malicious Word documents with remote payload hosting for calc.exe execution.

m00zh33/cve-2018-3191

Proof-of-concept exploit for CVE-2018-3191 targeting WebLogic Server via JNDI injection. Delivers a JAR payload to trigger remote code execution…

magicpipersec/wps-cve-2022-24934

PoC exploit server for CVE-2022-24934 that delivers a malicious payload via a fake WPS Update Server, targeting the wpsupdate.exe process for…

abrewer251/cve-2024-21762_fortinet_poc

Proof-of-concept scanner targeting CVE-2024-21762 in FortiOS SSL VPN’s /remote/hostcheck_validate endpoint with reverse shell payload delivery.

yesspider-hacker/log4j-payload-generator

log4j-paylaod generator : A generic payload generator for Apache log4j RCE CVE-2021-44228