log4j-urlscanner

log4j-detect Simple Python 3 script to detect the "Log4j" Java library vulnerability CVE-2021-44228 for a list of URL with multithreading The script "log4j-detect.py" developed in Python 3 is responsible for detecting whether a list of URLs are vulnerable to CVE-2021-44228. To do so, it sends a G...

CVE-2026-23744

usage: exploit.py -h --lhost LHOST --lport LPORT --rhost RHOST CVE-2026-23744 - PoC options: -h, --help show this help message and exit --lhost, -l LHOST Attacker IP address --lport, -p LPORT Attacker port --rhost, -t RHOST Target URL...

WP-CVE-2025-4322---Scan

Usage Normal Test python3 wp-backdoor-remote-scan.py https://misitio.com with JSON output python3 wp-backdoor-remote-scan.py https://misitio.com --json Adjust threads and timeout for rate-limited sites python3 wp-backdoor-remote-scan.py https://misitio.com --threads 5 --timeout 15...

CVE-2017-9841

CVE-2017-9841- Installation and Execution of the script 💻 Prerequisites Before starting, make sure you have the following tools installed on your machine: Python 3.x Git pip to manage Python dependencies Installation Steps 1. Clone the repository Use git to clone the repository: git clone...

CVE-2019-1006

CVE-2019-1006 Usage: Enter "python CVE-2019-1006.py "url"" in the terminal, where url is the URL of the RDG Gateway server to be tested. For example: python CVE-2019-1006.py "https://www.aaa.com/"...

CVE-2022-1592

CVE-2022-1592 POC pip install requests --break-system-packages CVE-2022-1592.py https://tatget.com/...

CVE-2022-31269

CVE-2022-31269 Nortek Control Linear eMerge E3-Series Information Disclosure Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2022-31269.py -u http://127.0.0.1 python3...

CVE-2026-39636-vulnerability-exp

1. Burp Suite must be opened before running here !! And the default Burp Suite port must be 8080. If it is different, you can change it yourself. 2. Download the required libraries pip install websockets==16.0 -i https://pypi.tuna.tsinghua.edu.cn/simple 3. Just run it directly CVE-2026-39363...

log4shell-scanner

log4shell-scanner A dependency-free, defensive scanner for Log4Shell — finds vulnerable log4j-core jars and JNDI exploit patterns in logs and config. Why this project During my CERT-In rotation I worked on threat identification, containment, remediation and threat hunting — exactly the workflow...

CVE-2021-41773

CVE-2021-41773 Description This script exploits CVE-2021-41773 to print file or/and execute command. This script is available for: Nmap Python Ruby Requirements Python python3 python3 Standard Library Ruby Ruby Ruby Standard Library Install git clone...

CVE-2023-38831_ReverseShell_Winrar

CVE-2023-38831 In this case, I share the necessary files to exploit this vulnerability in WinRAR, with which we can create a malicious PDF to establish a reverse shell to our attacker machine. ⚠️ NOTE: This content is shared for ethical purposes and is created to practice in controlled environment...

FuxiOS

FuxIOS.py v2.0 - CVE-2016-4631 Exploit PoC 📝 Personal Note 2025 Why am I publishing this now? While reviewing old hard drives and forgotten repositories, I came across this script that I wrote years ago when I was just starting my career in cybersecurity. It was a different time - Python 2.7...

CVE-2025-49132

CVE-2025-49132-POC I made this poc for my personal challenge inspired by 0xtensho Made for cleaner output and only for reverse shell Usage: Change the host and the listener variable first python3 CVE-2025-49132POC.py Disclaimer LEGAL DISCLAIMER: This Proof of Concept PoC is for educational purpos...

CVE-2017-9805-S2-052

S2-052 POC Usage: python3 struts20179805.py Disclaimer: This script is provided for educational purposes and authorised lab use only. It is intended to demonstrate the Apache Struts S2-052 CVE-2017-9805 vulnerability in controlled environments. You are solely responsible for how you use this tool...

wpUsersScan

wpUsersScan About wpUsersScan Enumerate the users list of the wordpress websites through the REST API / CVE-2017-5487,WordPress 4.7.1 - Username Enumeration Usage $ python wpUsersScan.py URL How to install Clone Clone the repository with: $ git clone https://github.com/R3K1NG/wpUsersScan.git $ cd...

rqu1-cve-2021-3060.py

This repository does not have a README...

exp

exp Batch scanning script for CVE-2023-35854 Usage: python3 piliang.py -r D:\1.txt...

CVE-2023-38831-Exploit-and-Detection

CVE-2023-38831-Exploit-and-Detection This repository has both an attack detection tool and a Proof-of-Concept PoC Python script for the WinRAR CVE-2023-38831 vulnerability...

CVE-2018-7600

Drupal-CVE-2018-7600 Usage: python3 exploitdrupalcve-2018-7600.py...

CVE-2012-2982

CVE-2012-2982 Python POC for CVE-2012-2982 Webmin 1.580 improved from the original by user OstojaOfficial This is an improved version of the original script that allows the user to see the input data format without needing to view the entire script to discover it. To achieve this, that section of...