CVE-2025-54068-livewire

CVE-2025-54068 - Livewire v3.6.3 Vulnerable Lab This folder builds a minimal Laravel + Livewire v3 application pinned to Livewire 3.6.3 vulnerable for reproducing CVE-2025-54068. The mounted component is intentionally written to be compatible with the public exploit chain it allows the stage-1...

laravel-rce-cve-2018-15133

laravel-rce-cve-2018-15133 CVE-2018-15133...

recon-test-livewire

About Laravel Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable and creative experience to be truly fulfilling. Laravel takes the pain out of development by easing common tasks used in many web projects, such as: Simple, fast routi...

CVE-2021-3129

CVE-2021-3129 PoC for CVE-2021-3129 Laravel For educational purposes only Test Set up the PoC environment $ docker-compose build $ docker-compose up -d Confirm it works See http://localhost:8000/ and make sure the Laravel default page is shown. Exploit $ docker-compose exec attacker sh / python3...

Blackash-CVE-2025-53833

🚨 CVE-2025-53833 — Critical ⚠️ SSTI ➜ RCE in LaRecipe Versions 2.8.1 📌 Overview Vulnerability ID : CVE-2025-53833 Component Affected : LaRecipe a Laravel-based documentation generator Versions Affected : All versions prior to 2.8.1 Vulnerability Type : Server-Side Template Injection SSTI Severity ...

CVE-2023-24249-PoC

CVE-2023-24249 PoC CVE-2023-24249 is an arbitrary file upload vulnerability in laravel-admin v1.8.19. This proof of concept exploits the vulnerability to upload a web shell. The exploit was written to use against the HackTheBox easy machine Usage. Example python3 CVE-2023-24249.py + Web shell...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 one-click getshell Usage python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 After success, use Godzilla to connect...

CVE-2021-3129-exp

Laravel Debug Mode RCE Vulnerability CVE-2021-3129 POC / EXP CVE-2021-3129 EXP / POC ⚠️ Note: Due to the fact that exploitation and detection of this vulnerability require multiple requests, the process may be slow. Usage: python CVE-2021-3129.py usage: python CVE-2021-3129.py -u url --exp Laravel...

CVE-2022-30778

Warning The vulnerability has been revoked Override This is Abount CVE-2021-43503. Requirement PHP = 8.0 Composer Recover vulnerability 1. Startup service composer install cp .env.example .env php artisan key:generate php artisan serve it will listening 8000 port in localhost 2. PoC queueResolver...

CVE-2024-52301-Research

CVE-2024-52301-Research A bit of research around CVE-2024-52301. I've seen the vuln and wanted to find out how Laravel is vulnerable. For this, I just diffed the 6.20.44 and 6.20.45 versions, and traced how GET parameters could end up changing the application configuration. I've written about thi...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

CVE-2021-3130

CVE-2021-3129 Yet another exploit for CVE-2021-3129! Made to have more features and reliability. Based on https://pentest-tools.com/blog/exploit-rce-vulnerability-laravel-cve-2021-3129 DISCLAIMER: This script is made to audit the security of systems. Only use this script on your own systems or on...

laravel-phpunit-rce-masscaner

laravel phpunit rce masscanner CVE-2017-9841 Masscanner for Laravel phpunit RCE CVE-2017-9841 deps python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Usage usage: tool -h --file --range , --single SINGLE optional arguments: -h, --help show this help message and exit...

Laravel_CVE-2021-3129_EXP

LaravelCVE-2021-3129EXP Reference exp: https://github.com/SNCKER/CVE-2021-3129 Version Requirements Laravel Iginition == 2.5.1 Local version of EXP: Laravel 8.4.2 Notes You need to place this exp in the phpgcc directory, otherwise phpgcc cannot be called. example...

CVE-2021-3129

CVE-2021-3129 Laravel debug rce Usage Execute docker-compse up -d to start the environment. Access port 8888 and click generate key on the homepage to reproduce. A few points about the docker environment: Copied .env.example to .env to enable debug environment Disabled phar.readonly in php.ini...

laravel-threat-detection

Laravel Threat Detection Security monitoring and attack logging for Laravel. Detect and log SQL injection, XSS, RCE, directory traversal, bot scanners and/wp-admin-style recon probes — every hostile request recorded to your database with full application context. It's an IDS, not a WAF: it never...

EXPLOIT-CVE-2025-27515

CVE-2025-27515 Proof of Concept A practical demonstration of CVE-2025-27515 , a file upload validation bypass vulnerability in Laravel Framework ≤ 12.0.0. Vulnerability Overview CVE-2025-27515 is a validation bypass that allows attackers to circumvent file upload restrictions when Laravel...

kraker

About Setup Server Setup Agent Setup Build from source Using release Contacts About Kraker is a distributed password brute-force system that allows you to run and manage the hashcat on different servers and workstations, focused on easy of use. There were two main goals during the design and...

laravel-exploits

laravel-exploits Exploit for CVE-2021-3129 Details: https://www.ambionics.io/blog/laravel-debug-rce Usage $ php -d'phar.readonly=0' ./phpggc --phar phar -o /tmp/exploit.phar --fast-destruct monolog/rce1 system id $ ./laravel-ignition-rce.py http://localhost:8000/ /tmp/exploit.phar Log file:...

CVE-2021-3129

Remote Code Execution: Laravel CVE-2021-3129 📜 Description This script is designed to exploit the Remote Code Execution RCE vulnerability identified in several Laravel versions, known as CVE-2021-3129. By leveraging this vulnerability, the script allows users to write and execute commands on a...