f5_rce_poc

Usage python3 f5rce.py -u 指定目标URL -f 批量检测文件 -c 执行命令 -s/--ssrf 通过ssrf获得token执行命令 The effect is as shown below: python3 f5rce.py -u 127.0.0.1 --ssrf After executing the command, enter exit to exit PS: The output is not elegant enough, I will modify it 😁 Future Updates: Fixed some command execution...

CVE-2025-60787

CVE-2025-60787 - Authenticated RCE in motionEye PoC for CVE-2025-60787 that is an Authenticated RCE vulnerability for motionEye with all afected versions up to 0.43.1b4 included. This is an automated PoC for the vulnerability described in this repository. Credits to prabhatverma47. Usage The scri...

CVE-2020-15227

CVE-2020-15227 DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins I made this exploit according to publishing a CVE of David Grudl The founder of Nette foundation as he did not solv...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle just disclosed a new vulnerability CVE-2025-61884, the detection script for that vuln can be found in this repo or originally here:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. As quoted from Oracle's security advisory: This Securit...

PoC-CVE-2019-1003030

Jenkins 2.63 Script Security Sandbox Bypass PoC This project automates the creation and delivery of Groovy payloads to the Jenkins SecureGroovyScript validation endpoint used by Jenkins 2.63. The tool supports both interactive and one-shot execution. the exploit doesn't return output so you are...

CVE-2025-32579

⚠️ CVE-2025-32579 - Critical RCE via Sync Posts Plugin WordPress 📦 Affects: Sync Posts 🧨 CVSS Score: 9.9 CRITICAL 📁 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 🧠 Vulnerability Overview The Sync Posts WordPress plugin by SoftClever Limited is vulnerable to an Unrestricted File Upload...

CVE-2022-1565

WordPress Plugin WP All Import = 3.6.7 - Remote Code Execution RCE Authenticated Ngày: 05 tháng 11 năm 2023 Tác giả khai thác: Việt HÙng https://github.com/phanthibichtram12 Trang chủ của nhà cung cấp: https://www.wpallimport.com/ Link phần mềm: https://wordpress.org/plugins/wp-all-import/advance...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 This exploit uses addresses and shellcode for Citrix VPX 13.1-48.47. For the full writeup, click here. Usage NASM is required to build the shellcode. $ sudo apt install nasm The included shellcode will download and run a shell script from a remote https server. The...

react2shell

React2Shell Proof of Concept exploit for CVE-2025-55182 Unauthenticated Remote Code Execution vulnerability a.k.a React2Shell. The script used to get shell on Next.js versions before; 15.0.4 and below 15.1.8 and below 15.2.5 and below 15.3.5 and below 15.4.7 and below 15.5.6 and below 16.0.6 and...

fastjson-1.2.58-rce

fastjson-1.2.58-rce need: fastjson autoType is enabled h2 database and some jar . ├── fastjson-1.2.58.jar ├── h2-1.4.199.jar ├── jackson-annotations-2.9.8.jar ├── jackson-core-2.9.8.jar ├── jackson-databind-2.9.8.jar └── logback-core-1.3.0-alpha4.jar Download fastjson-1.2.58.jar...

CVE-2024-36401

RCE for CVE-2024-36401 POC for CVE-2024-36401 GeoServer. This POC will attempt to establish a reverse system shell from the targets. Overview POC for CVE-2024-36401: RCE for GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer. This POC is based on the security advisory by phith0n. H...

CVE-2025-55182-PoC

CVE-2025-55182-PoC Poc for CVE-2025-55182 Usage: python3 poc.py -u http://target.com --cmd "" Legal Disclaimer This tool is provided for educational purposes and authorized security testing only. Usage of this tool for attacking targets without prior mutual consent is illegal. The developer assum...

CVE-2024-4879

CVE-2024-4879 Exploit & PoC - Nuclei Template CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticate...

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE This PoC demonstrates how an attacker can chain Orange Tsai's CVE-2024-4577 with DNS rebinding to achieve remote code execution on internal network infrastructure directly through the victim’s web browser. By bypassing Same-Origin Policy SOP and exploiting vulnerable PHP-CGI...

CVE-2021-3129

CVE-2021-3129 Laravel debug rce Usage Execute docker-compse up -d to start the environment. Access port 8888 and click generate key on the homepage to reproduce. A few points about the docker environment: Copied .env.example to .env to enable debug environment Disabled phar.readonly in php.ini...

ProFTPD_CVE-2015-3306

m4ud ProFTPD 1.3.5 RCE exploit CVE : 2015-3306! ProFTPd 1.3.5 RCE Usage: ProFTPD.py options Options: -h, --help show this help message and exit -l LHOST, --lhost=LHOST Local IP Required for Reverse Shell, -p LPORT, --lport=LPORT Port Required for Reverse Shell, -t TARGET, --target=TARGET Vulnerab...

react2shell-interactive

React2Shell - CVE-2025-55182 Interactive PoC Interactive shell for exploiting CVE-2025-55182, a Remote Code Execution vulnerability in React Server Components. Disclaimer This tool is provided for EDUCATIONAL and AUTHORIZED SECURITY TESTING purposes only. Only use on systems you own or have...

React2Shell-CVE-2025-55182-PoC-Reverse-Shell

🚀 React2Shell - CVE-2025–55182 Exploit Script 🔥 Intro This repository contains an exploit script for the React2Shell vulnerability CVE-2025–55182, which targets a specific type of Node.js Prototype Pollution leading to Remote Code Execution RCE. The script is specifically designed to establish a...

CVE-2024-4885

CVE-2024-4885 PoC for CVE-2024-4885 Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution CVE-2024-4885 Technical Analysis A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/ Usage python3...

n8n-RCE

n8n RCE PATCHED Remote Code Execution via n8n Workflows Based on CVE-2025-68613 ⚠️ Made for Educational purposes only 📚 Installation & Usage 🛠️ $ git clone https://github.com/AbdulRKB/n8n-RCE.git $ cd n8n-RCE $ pip install -r requirements.txt $ python exploit.py -u -e -p...