Webapp_Pentast
amhar-hckr/webapp_pentastCVE-2022-31147 is a path traversal flaw in matthiasmullie/minify. This guide helps security teams test for arbitrary file read on Linux and Windows…
educationexploitationpayload-generation+3
amhar-hckr/webapp_pentastCVE-2022-31147 is a path traversal flaw in matthiasmullie/minify. This guide helps security teams test for arbitrary file read on Linux and Windows…
joker-wiggin/cve-2025-58360-geoserver-xxeDocker-based lab demonstrating CVE-2025-58360, a critical unauthenticated XXE injection in GeoServer WMS/OWS services. Includes exploit script for…
gagaltotal/n8n-cve-2025-68613Authenticated RCE exploit PoC and vulnerability scanner for CVE-2025-68613 in n8n. Supports command execution, file operations, and reverse shell…
nika0x38/cve-2014-6287A Rust implementation of the CVE-2014-6287 exploit targeting Rejetto HTTP File Server (HFS) versions 2.3x before 2.3c.
developerfred/cve-2019-14206-pocProof-of-concept exploit for CVE-2019-14206, demonstrating arbitrary file deletion in the Adaptive Images WordPress plugin. Includes Docker lab,…
vigilante-1337/cve-2023-29386PoC CVE-2023-29386 — Manager for Icomoon < 2.1 - Unauthenticated Arbitrary File Upload
wailyacoubi9/cve-2025-26198Educational reproduction of CVE-2025-26198 SQL injection in CloudClassroom-PHP-Project, demonstrating four exploitation techniques (boolean, union,…
thawphone/cve-2025-61183Detailed disclosure of a stored XSS vulnerability in VaahCMS via unsafe SVG file upload handling, including exploitation flow, affected endpoints,…
amalpvatayam67/day03-jenkins-23897Jenkins CLI arbitrary file read (CVE-2024-23897)
vishalnoza/cve-2024-38819-poc2Proof-of-concept exploit for CVE-2024-38819, demonstrating path traversal via symbolic links and percent-encoding in Spring Boot static file routing.
hashdr1ft/soc_287SOC287 - Arbitrary File Read on Checkpoint Security Gateway [CVE-2024-24919]
hybinn/cve-2024-23897Step-by-step lab environment setup for exploiting CVE-2024-23897 in Jenkins, including Java installation, WAR file download, and execution on port…
pixel-defaultbr/cve-2023-50164Educational exploit for CVE-2023-50164 (Apache Struts 2) demonstrating path traversal and remote code execution via malicious file upload, designed…
pratikjojode/vcenter-cve-2021-21980-labRealistic vulnerable lab for CVE-2021-21980 (VMware vSphere Path Traversal) - Actual file exploitation, not a mock server
4nuxd/react2shellR2S is a comprehensive exploitation and post-exploitation framework targeting the Next.js React Server Components vulnerability (CVE-2025-55182). It…
haxerr9/cve-2025-5840Python-based proof-of-concept exploit for CVE-2025-5840 targeting file upload vulnerabilities in database management systems, enabling remote command…
nxploited/cve-2025-5961Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload
joaz94/rejjeto_hfs-rce-exploit-cve-2014-6287Remote Command Execution exploit for Rejetto HTTP File Server 2.3.x (CVE-2014-6287) rewritten in Python 3 for modern offensive security testing.