CVE-2024-36401-PoC
y1s4s/cve-2024-36401-pocProof-of-concept exploit for CVE-2024-36401 enabling remote code execution via HTTP requests with reverse shell payload generation and Base64…
exploitationpayload-generationpenetration-testing+3
y1s4s/cve-2024-36401-pocProof-of-concept exploit for CVE-2024-36401 enabling remote code execution via HTTP requests with reverse shell payload generation and Base64…
larrypeseckis/burp-cc-bridgeREST API automation for Burp Suite Community Edition. Drop-in Java extension exposing send/repeat/history endpoints over a local HTTP API.
joelgmsec/http-shellMultiplatform HTTP reverse shell providing a shell-like interface over HTTP, with file upload/download, command history, auto-reconnection, and sudo…
ridpath/cve-2021-26828-ultimateScadaFlare Authenticated RCE Exploit Framework for ScadaBR (CVE-2021-26828) OpenPLC ScadaBR
0xdak/cve-2026-67340_exploitPost-auth RCE exploit for ArcadeDB via JavaScript trigger GraalVM sandbox escape, executing OS commands over HTTP API with reverse shell or blind…
0x00phantom-hat/cve-2026-5029-exploitProof-of-concept exploit for CVE-2026-5029, delivering unauthenticated remote code execution via the run-code MCP tool on exposed HTTP endpoints.…
scirusvulgaris/cve-2017-12617Python exploit for Apache Tomcat CVE-2017-12617 RCE vulnerability. Checks targets, generates webshells, and provides remote shell access on systems…
medaz-sploit/cve-2025-9074-docker-desktop-api-escape-pocProof-of-concept exploit for CVE-2025-9074 enabling Docker Desktop API escape via raw HTTP requests. Provides an emulated interactive shell inside a…
afifudinmtop/mcpjam-inspector-1.4.2-remote-code-execution-cve-2026-23744Python exploit for CVE-2026-23744 in MCPJam Inspector 1.4.2, enabling remote code execution via reverse shell on target HTTP servers.
d3ext/dfshellPython-based forward shell tool that creates a TTY-like interactive shell over HTTP using named pipes, enabling command execution on firewalled…
shivshantp/cve-2025-24813Apache Tomcat PUT JSP RCE - CVE-2025-24813 - Exploit & PoC
wooluo/cve-2022-25581Python exploit script for CVE-2022-25581 (ClassCMS 2.4 arbitrary file download) that automates login, CSRF token extraction, malicious zip upload…
sandimfz/cve-2024-23692Automates CVE-2024-23692 exploitation against unpatched Rejetto HFS with an in-memory PowerShell reverse shell, HTTP payload staging, and AV/EDR…
squid22/webmin_cve-2019-15107CVE-2019–15107 - Unauthenticated RCE Webmin <=1.920
jas502n/cve-2018-1273Python-based exploit for CVE-2018-1273 (Spring Data Commons RCE) with interactive command shell and HTTP POST payload injection for penetration…
s1lentf00thold/cve-2021-21425-rcePython exploit script for CVE-2021-21425 targeting Grav CMS admin panel, delivering a reverse shell via HTTP POST request with configurable LHOST and…
10cks/cve-2014-6287Rejetto http File Server 2.3.x (Reverse shell)
yanghyperdata/logj4_pocshell_cve-2021-44228Proof-of-concept exploit for CVE-2021-44228 (Log4Shell) that automates LDAP and HTTP servers to deliver a reverse shell payload to a vulnerable Java…