Laravel-CVE-2018-15133

CVE-2018-15133 - Vulnerabilidad de deserialización de la APPKEY de Laravel WhiteHat School tercera promoción, clase 28, Lee Yebin - Virtualización: configuración de Docker vulnerable https://github.com/yeahhbean/Laravel-CVE-2018-15133 Resumen Este proyecto es un entorno basado en Docker creado pa...

badsecrets

badsecrets A pure python library for identifying the use of known or very weak cryptographic secrets across a variety of platforms. The project is designed to be both a repository of various "known secrets" for example, ASP.NET machine keys found in examples in tutorials, and to provide a...

CVE-2025-26159

CVE-2025-26159 Este script solo puede utilizarse en entornos autorizados donde se haya otorgado permiso explícito. El autor no es responsable de ningún uso indebido, daño o consecuencia derivada del uso de este script. Este script decodifica, filtra y extrae cookies como parte de la explotación d...

hoh4

Requisitos: python Comando: python laravel-ignition-rce.py ""...

laravel-threat-detection

Laravel Threat Detection...

CVE-2021-3129

Ejecución Remota de Código: Laravel CVE-2021-3129 📜 Descripción Este script está diseñado para explotar la vulnerabilidad de Ejecución Remota de Código RCE identificada en varias versiones de Laravel, conocida como CVE-2021-3129. Aprovechando esta vulnerabilidad, el script permite a los usuarios...

Laravel Filemanager v2.5.1 - Local File Inclusion

Laravel Filemanager aka UniSharp through version 2.5.1 is vulnerable to local file inclusion via download?workingdir=%2F. id: CVE-2022-40734 info: name: Laravel Filemanager v2.5.1 - Local File Inclusion author: arafatansari severity: medium description: | Laravel Filemanager aka UniSharp through...

Laravel Livewire v3 - Remote Command Execution

Livewire v3 Laravel contains a vulnerability in its component hydration/update mechanism that can be exploited to reach remote command execution RCE without authentication under certain conditions. id: CVE-2025-54068 info: name: Laravel Livewire v3 - Remote Command Execution author: flame-11...

FreeScout < 1.8.224 - Invite Hash Authorization Bypass

FreeScout prior to 1.8.224 contains an authentication bypass caused by improper invitehash handling and decryption failure in user setup endpoint, letting anonymous attackers reset credentials and log in as the lowest-id activated user, exploit requires no authentication. id: CVE-2026-53595 info:...

Scramble Laravel - Remote Code Execution

Scramble for Laravel = 0.13.2 and = 0.13.2 and 0.13.22 contains a remote code execution caused by evaluation of user-controlled input in validation rules during documentation generation, letting remote attackers execute arbitrary PHP code, exploit requires publicly accessible documentation...

CVE-2025-49132

CVE-2025-49132 - 10.0 Crítico https://github.com/pterodactyl/panel/security/advisories/GHSA-24wv-6c99-f843 Versiones vulnerables: 1.9.0 .. 1.11.10 Consideraciones de OpSec La explotación de RCE es limitada, pero se puede detectar mediante: cat /var/www/pterodactyl/storage/logs/laravel-2025--.log ...

CVE-2021-43503

Warning The vulnerability has been revoked Override This is Abount CVE-2021-43503, I can not replicate this vulnerability through exp Requirement PHP 7.1. Composer registrar=$b; namespace Illuminate\Queue\Capsule class Manager protected $manager; public function construct$c $this-manager-method=$...

laravelN00b

laravelN00b Incorrect configuration allows you to access .env files or reading env variables. LaravelN00b automated scan .env files and checking debug mode in victim host. Scan rationale Scan host. Resolve IP adress and check .env file in IP Adress Checking debug mode Laravel Read .env variables...

laravel-phpunit-rce-masscaner

laravel phpunit rce masscanner CVE-2017-9841 Escáner masivo para Laravel phpunit RCE CVE-2017-9841 dependencias root@kitploit: python3 -m pip install -r requirements.txt or pipenv install -r requirements.txt Uso root@kitploit: usage: tool -h --file --range , --single SINGLE optional arguments: -h...

vapi

vAPI vAPI es una Interfaz Programada Adversamente Vulnerable que es una API auto-alojable que simula los escenarios del OWASP API Top 10 en forma de ejercicios. Requisitos PHP MySQL PostMan MITM Proxy Instalación Docker root@kitploit: docker-compose up -d Instalación Manual Copiando el Código...

CVE-2021-3129-exp

Vulnerabilidad RCE en modo Debug de Laravel CVE-2021-3129 poc / exp CVE-2021-3129 exp / poc Nota ⚠️: Debido a que la explotación y detección de esta vulnerabilidad envían múltiples solicitudes, el proceso puede ser lento. uso: root@kitploit: python CVE-2021-3129.py usage: python CVE-2021-3129.py -...

laravel-CVE-2021-3129-EXP

laravel-CVE-2021-3129-EXP CVE-2021-3129 One-click getshell Usage python3 laravel-CVE-2021-3129-EXP.py http://127.0.0.1:8000 After success, use Godzilla to connect...

CVE-2023-24249-Exploit

Script de explotación CVE-2023-24249 Descripción Este repositorio contiene un script de explotación para CVE-2023-24249, una vulnerabilidad crítica encontrada en laravel-admin versión 1.8.19. Esta vulnerabilidad permite la carga arbitraria de archivos, lo que permite a los atacantes ejecutar códi...

CVE-2021-3129

CVE-2021-3129 — Laravel Ignition Remote Code Execution CVSS 9.8 Critical | Unsafe File Operations → Log Poisoning → Phar Deserialization → RCE Overview Laravel Ignition 2.5.2 Laravel 8.4.2 is vulnerable to RCE when APPDEBUG=true. The /ignition/execute-solution endpoint allows arbitrary file writi...

CVE-2021-39172-RCE

CVE-2021-39172 Cachet 2.4: Code Execution via Laravel Configuration Injection blog post about the vulnerability https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection/ you can use this for ctf or just for learning have fun and May God bless you all...