CVE-2020-14882_ALL

CVE-2020-14882ALL CVE-2020-14882ALL comprehensive exploitation tool, supporting command echo detection, batch command echo, external XML command execution without echo, and other features. Required modules: requests, http.client The tool is only for authorized security testing. Do not use it...

snmp-shell

SNMP Shell Shell Simulation over Net-SNMP with extend functionality Here is a preview : Description If your target has a Net-SNMP instance with the "extend" functionality, and you got a SNMP community string which gives you write access , you can use this tool to automate the process of sending...

CVE-2021-32160

..| XSS to Privileged user |.. Description : Exploiting a Reflected Cross-Site Scripting XSS attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version...

CVE-2021-31761

CVE-2021-31761 Description : Exploiting a Reflected Cross-Site Scripting XSS attack to get a Remote Command Execution RCE through the Webmin's running process feature Tested Version : Webmin 1.973 GitHub's latest version 07/03/2021 Attack Type: Remote Impact : Remote Command Execution eXploit's...

autopwn

autopwn Specify targets and run sets of tools against them autopwn is designed to make a pentester's life easier and more consistent by allowing them to specify tools they would like to run against targets, without having to type them in a shell or write a script. This tool will probably be usefu...

CVE-2023-33246

CVE-2023-33246 CVE-2023-33246: Apache RocketMQ Remote Command Execution Vulnerability Detection Tool Tool Features Simple Usage Run ./apacherocketmqcve202333246scannerlinuxamd64 scan Output: Whether the vulnerability exists: Yes or VulnFound: true indicates the vulnerability exists, and the Versi...

ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

struts-pwn_CVE-2017-9805

struts-pwn - CVE-2017-9805 Exploit An exploit for Apache Struts CVE-2017-9805 Usage Check if the vulnerability exists against a single URL. python struts-pwn.py --url 'http://example.com/struts2-rest-showcase/orders/3' Check if the vulnerability exists against a list of URLs. python struts-pwn.py...

OFBiz-Attack

OFBiz-Attack A Tool For CVE-2023-49070/CVE-2023-51467 Attack Test Environment vulhub/ofbiz:18.12.09 Usage Start java -jar OFBiz-Attack.jar There are three modules: Vulnerability Detection Just enter the target URL. Do not add extra routes, otherwise it will affect subsequent module exploitation...

smbmap

SMBMap SMBMap allows users to enumerate samba share drives across an entire domain. List share drives, drive permissions, share contents, upload/download functionality, file name auto-download pattern matching, and even execute remote commands. This tool was designed with pen testing in mind, and...

routers-exploit

OpenSource Repo with PoC's and vulns found in routers TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC CVE-2020-9374 - TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC Payload: "$ls" TP LINK TL-WR849N - Auth Bypass: Firmware and Configs update TP LINK TL-WR849N - REMOTE COMMAND EXECUTION PoC...

1Panel-CVE-2025-54424-

CVE-2025-54424 CVE-2025-54424：1Panel Client Certificate Bypass RCE Vulnerability All-in-One Tool Scan + Exploit Vulnerability Overview 1Panel is an open-source, modern Linux operation and maintenance panel that provides a graphical interface for deploying websites, managing servers, and running...

firepwner

CVE-2015-6357: FirePWNER Exploit for Cisco FireSIGHT Management Center SSL Validation Vulnerability Introduction On its own the Cisco FireSIGHT Management Center Certificate Validation Vulnerability3 is a medium severity vulnerability with a CVSS of 5.1. However, this vulnerability is an example ...

CVE-2026-75604

CVE-2026-75604 RCE PoC Python proof of concept for CVE-2026-75604, an unauthenticated remote command execution vulnerability in Windows-hosted Next.js applications that use both the Pages Router and App Router without Cache Components. Demonstration Requirements Next.js =13.4 =16.0 16.3.3 Native...

CVE-2026-87902

CVE-2026-87902 | ---|--- Advisory| GHSA-7hp8-65ch-5whp Product| WordPress = 7.1.1, fixed in 7.1.2; both versions tested Sink| wp-includes/template.php, getpagetemplate Cause| the candidate built from pagename is not passed through validatefile Actor| anonymous, no account, no cookie, no CSRF toke...

CVE-2019-19781

CVE-2019-19781 Citrix ADC Remote Command Execution Reference: https://www.exploit-db.com/exploits/47901...

cve-2020-14882

cve-2020-14882 Bash script to exploit the Oracle's Weblogic Unauthenticated Remote Command Execution - CVE-2020-14882 Usage ./cve-2020-14882.sh...

CVE-2019-17558_Solr_Vul_Tool

Solr Velocity Template Injection Vulnerability Detection Tool Tool Introduction At the end of October 2019, the Solr Velocity template injection remote command execution vulnerability was disclosed. Manual detection of this vulnerability requires several rounds of capturing and modifying packets...

CVE-2020-14947

CVE-2020-14947 The official exploit for OCS Inventory NG v2.7 Remote Command Execution CVE-2020-14947...

-CVE-2017-9805

Vulnerability information Resources: https://vulners.com/cve/CVE-2017-9805 What is this? A python exploit script capable of executing remote commands into the shell of a system hosting a Struts2 vulnerable to S2-052. Usage ╭─root@blackshell / ╰─ python s2-052.py --target...