cve-lite-cli

Most tools tell you what's wrong. CVE Lite CLI tells you what to run. CVE Lite CLI 🏆 Officially recognized as anOWASP Lab Project Vulnerability scanning that starts in your terminal and fits cleanly into CI. Scan your lockfile, get copy-and-run fix commands, and ship clean code. Scan. Understand...

clif

clif clif is a command-line interface CLI application fuzzer, pretty much what wfuzz or ffuf are for web. It was inspired by sudo vulnerability CVE-2021-3156 and the fact that for some reasons, Google's afl-fuzz doesn't allow for unlimited argument or option specification. Usage clif -e -w , -n -...

DrupalCVE-2018-7602

Drupal Remote Code Execution Vulnerability CVE-2018-7602 Affected software: drupal Method: Encode the in the URL twice to bypass the sanitize function filtering Effect: Arbitrary command execution Vulnerability Environment Execute the following command to start the drupal 7.57 environment:...

exrex

EXREX Irregular methods for regular expressions. Exrex is a command line tool and python module that generates all - or random - matching strings to a given regular expression and more. It's pure python, without external dependencies. There are regular expressions with infinite matching strings...

CVE-2025-9074-Docker-Exploit

CVE-2025-9074 Docker Container Command Execution Tool A powerful Docker remote API exploitation tool for security research and testing of CVE-2025-9074 vulnerability. Core Advantages ✅ Fully automated container lifecycle management : Automatically creates temporary containers, cleans up after...

SharpStrike

SharpStrike SharpStrike is a post-exploitation tool written in C that uses either CIM or WMI to query remote systems. It can use provided credentials or the current user's session. Note: Some commands will use PowerShell in combination with WMI, denoted with in the --show-commands command...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - OS Command Injection via tracer-behavior Endpoint Fortinet FortiSandbox is an advanced threat protection solution that creates isolated environments to analyze suspicious files, URLs, and network traffic for malicious behavior. It uses a...

CVE-2025-49132_HTB_SEASON10

CVE-2025-49132 - Pterodactyl Panel RCE Exploit HTB Season 10 - Pterodactyl Machine Writeup Overview Target: Pterodactyl HTB Machine Medium Difficulty CVE: CVE-2025-49132 Severity: Critical CVSS 9.8 Attack Type: Unauthenticated Remote Code Execution Affected: Pterodactyl Panel v1.11.11 This exploi...

CVE-2020-35713

Description Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page. How to use Step 1: Modify the IP address in cve-2020-35713.py file to the target address Step 2: Run the...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Remote Code Execution RCE CVE-2021-4045 🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras = v1.1.16 Build 211209" 🔓 Read about the exploit from exploit db This is a command injection vulnerability that affect all TP-Link Tapo c200 camera firmware...

CVE-2025-55182

CVE-2025-55182 A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. 🚀 Installation wget -q -O /usr/bin/CVE-2025-55182 https://raw.githubusercontent.com/rix4uni/CVE-2025-55182/refs/heads/main/CVE-2025-55182 && chmod +x...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 Cacti remoteagent.php Unauthenticated Command Injection. This script checks only the conditions of CVE-2022-46169. What is Cacti? Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. ...

VcenterKiller

VcenterKiller -1. Note For those setting up a vulnerable environment locally, using vckiller to verify log4j will mostly fail, because under VMware's NAT mode, the outgoing network interface in the verification module will be determined as 127.0.0.1, causing the target's LDAP Server address to...

b374k

b374k shell 3.2 This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser Features : File manager view, edit, rename, delete, upload, download, archiver, etc Search file,...

CVE-2011-2523

CVE-2011-2523 - vsftpd 2.3.4 Exploit Description vsftpd, which stands for Very Secure FTP Daemon,is an FTP server for Unix-like systems, including Linux. It is licensed under the GNU General Public License. It supports IPv6 and SSL. In July 2011, it was discovered that vsftpd version 2.3.4...

dirsearch

dirsearch - Web Path Discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v. Join the Discord server to communicate with the team. Quick Start dirsearch requires Python 3.11 or higher. git clone https://github.com/maurosoria/dirsearch.git...

sendmail-clamav-exploit-CVE-2007-4560

Sendmail + ClamAV-Milter Exploit CVE-2007-4560 Python RCE exploit for Sendmail with ClamAV-Milter After successful exploitation: nc 1001 bash -i Tested On Sendmail 8.13.4/8.13.4/Debian-3sarge3 ClamAV-Milter 0.91.2 References Original exploit: https://www.exploit-...

CVE-2025-69212-PoC

CVE-2025-69212 - OpenSTAManager OS Command Injection PoC Usage Install dependencies: pip install -r requirements.txt Run a single command and print its output: python3 cve-2025-69212poc.py -u http://target.com -U admin -P 'password' -c 'id' Drop a persistent PHP webshell instead: python3...

fortinet-fortiweb-cve-2025-64446-58034

Understanding Fortinet FortiWeb Vulnerabilities CVE-2025-64446, CVE-2025-58034 1. Overview Fortinet FortiWeb is a Web Application Firewall WAF device widely deployed in enterprise systems to protect web applications from common threats. Since FortiWeb typically sits at a central protection layer,...

CVE-2021-26084

CVE-2021-26084 CVE-2021-26084 Remote Code Execution on Confluence Servers. Dork Fofa: app="ATLASSIAN-Confluence" Usage Show help information. python PoC.py Vulnerability verification for individual websites. python PoC.py -u https://1.1.1.1 Command execution. python PoC.py -u https://1.1.1.1 -e...