Tools

0xm4ud/proftpd_cve-2015-3306

Exploit for ProFTPD 1.3.5 CVE-2015-3306 that writes a PHP backdoor to the target webroot and spawns a reverse shell for remote code execution.

0xdtc/prestashop-cve-2024-34716

Automates a CSRF attack against CVE-2024-34716 to deploy a PHP reverse shell on PrestaShop, with automated payload packaging and Netcat listener…

qianniaoge/cve-2020-14882_exploit_gui

GUI-based exploit tool for CVE-2020-14882 targeting Oracle WebLogic servers. Supports reverse shell payload generation, proxy configuration, and…

80ottanta80/cve-2025-24893-poc

XWiki Unauthenticated RCE Exploit for Reverse Shell

h3x0v3rl0rd/cve-2009-2265

Exploit for CVE-2009-2265 targeting ColdFusion 8.0.1 with JSP reverse shell payload generation and automated upload.

0xdtc/pluck-cms-v4.7.18-remote-code-execution-cve-2023-50564

Bash exploit automating authenticated remote code execution in Pluck CMS 4.7.18 via malicious ZIP upload, triggering a PHP reverse shell for…

raffli-dev/cve-2023-41425

Exploit for Wonder CMS XSS to RCE (CVE-2023-41425) with theme upload and reverse shell payloads.

adrianmafandy/cve-2021-41773

Proof-of-concept exploit for CVE-2021-41773, a path traversal and remote code execution vulnerability in Apache HTTP Server 2.4.49. Automates…

somisec/cve-2024-28397-reverse-shell

Reverse shell for CVE-2024-28397.

jongmartinez/-cve-2017-9805-

Python exploit script for Apache Struts2 REST Plugin XStream RCE (CVE-2017-9805) enabling remote command execution and reverse shell on vulnerable…

kernel-cyber/cve-2009-4623

Exploit for CVE-2009-4623: remote file inclusion in Advanced Comment System 1.0 enabling arbitrary PHP code execution and reverse shell via ACS_path…

mrterrestrial/cve-2023-50564

This script exploits the file upload feature in Pluck CMS v4.7.18 to upload a malicious PHP file, enabling remote access via a reverse shell. Once…

btar1gan/exploit_cve-2024-39205

Exploit for CVE-2024-39205, a js2py sandbox escape that enables remote code execution and establishes a reverse shell.

harutomo-jp/cve-2024-28397-rce

Python exploit script for CVE-2024-28397 targeting js2py <= v0.74. Supports reverse shell and custom command execution via HTTP endpoint.

cdedmondson/modified-cve-2015-3306-exploit

Python exploit for CVE-2015-3306 targeting ProFTPD servers. Automates PHP reverse shell upload via FTP to achieve remote code execution on vulnerable…

cyn8/cve-2023-30990

IBM i DDM Unauthenticated RCE - Java Reverse Shell

cristibtz/cve-2025-62369

This script exploits CVE-2025-62369 in Xibo CMS to execute a reverse shell command.