Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution

Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution CVE-2014-6287 Rewrite of Pergyz 49584.py to return an x64 PowerShell Reverse Shell Usage $ python3 hfs-2-3-exploit.py Supply variables when prompted, auto starts Netcat for you...

CVE-2022-22963_Reverse-Shell-Exploit

CVE-2022-22963 Reverse Shell Exploit This is a Python script that exploits CVE-2022-22963, a remote code execution vulnerability in Spring Cloud Function that allows attackers to execute arbitrary code on a vulnerable server. The exploit uses the vulnerable /functionRouter endpoint to execute a...

Samba-CVE-2007-2447-Exploit

Samba CVE-2007-2447 Exploit This is a Python script for exploiting CVE-2007-2447, a vulnerability known as 'Username' map script command execution in the Samba server. Description This exploit is developed to target Samba versions 3.x - 4.x. CVE-2007-2447 allows an attacker to execute arbitrary...

CVE-2018-12613

CVE-2018-12613 Modified standalone exploit ported to Python 3. Tested on Python 3.7.3, phpMyAdmin 4.8.1 running on Ubuntu 16.04 Works on Linux only. Original exploit by SSD. All credits to them. Changes made 1. Added function to exit if provided phpMyAdmin username/password is correct 2. Added...

CVE-2025-24132-Scanner

EN | KR 📄 Overview This tool discovers AirPlay-capable devices on your local network via mDNS Zeroconf and tests them for the CVE-2025-24132 “zero-click” HTTP RCE vulnerability. Discovered devices are listed in a simple GUI; click a device to view all retrieved properties. Prerequisites Python 3....

CVE-2022-24637

CVE-2022-24637 Open Web Analytics OWA - Unauthenticated Remote Code Execution https://vulners.com/cve/CVE-2022-24637 Example python3 exploit.py -u admin -p hacker http://target.org 10.10.11.12 4444...

pwncat

pwncat pwncat es una plataforma de post-explotación para objetivos Linux. Comenzó como un envoltorio alrededor de shells básicos bind y reverse y ha crecido desde entonces. Agiliza las operaciones comunes del equipo rojo mientras prepara código desde tu máquina atacante, no desde el objetivo...

CVE-2025-5548

🚀 CVE-2025-5548 - FreeFloat FTP Server 1.0 Exploitation Professional vulnerability analysis & full remote buffer overflow exploitation 🎯 Project Highlights Complete real-world case study of CVE-2025-5548 remote stack-based buffer overflow in FreeFloat FTP Server 1.0 via NOOP command Manual tool...

CVE-2019-7609

CVE-2019-7609 New CVE-2019-7609 which works with python 13 exploit CVE-2019-7609kibana RCE on right way by python3 scripts Reference: https://github.com/LandGrey/CVE-2019-7609 snapshot usage usage: python3 CVE-2019-7609-kibana-rce.py -h -u URL -host REMOTEHOST -port REMOTEPORT --shell optional...

CVE-2023-41425-RCE-WonderCMS-4.3.2

🚨 WonderCMS RCE Exploit Tool CVE-2023-41425 This Python-based offensive security tool automates the exploitation of a Remote Code Execution RCE vulnerability in WonderCMS 4.3.2 , specifically CVE-2023-41425. It streamlines the process of crafting a malicious ZIP theme module and delivering a...

CVE-2024-27956

🚨POC RELEASED🚨PoC for SQL Injection leads to RCE in Wordpress released CVE-2024-27956. WordPress Admin Account Creation and Reverse Shell cve-2024-27956 Usage- sudo python3 cve.py...

CVE-2023-0830

CVE-2023-0830: EasyNAS 1.1.0 Authenticated OS Command Injection Exploit This Python script is a powerful exploit for EasyNAS version 1.1.0 with enhanced functionality, including an integrated listener. The vulnerability exploited is a command injection flaw, which requires authentication. The...

CVE-2023-43208-PoC

CVE-2023-43208 - Mirth Connect Unauthenticated RCE Requirements Python 3.11 or higher tested on 3.11, 3.12, 3.13 Setup Create a clean virtual environment python3 -m venv .venv source .venv/bin/activate Install pinned dependencies pip install -r requirements.txt Usage Check version only python3...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool es una herramienta de pruebas de penetración de código abierto que evalúa la seguridad de bases de datos Oracle de forma remota. Ejemplos de uso de ODAT: Tiene una base de datos Oracle...

CVE-2024-40453

CVE-2024-40453 - Squirrelly v9.0.0 RCE Disclaimer: This script is for educational use only. Do not use it for illegal purposes. If you do, it’s entirely your responsibility; I am not liable for any misuse. Description This script creates a reverse shell called payload.sh in the current directory...

reverse-shell

reverse-shell Reverse Shell como servicio - https://reverse-shell.sh Reverse shell fácil de recordar que debería funcionar en la mayoría de sistemas tipo Unix. Detecta el software disponible en el objetivo y ejecuta un payload apropiado. Uso 1. Escucha la conexión En tu máquina, abre un puerto y...

POC-IngressNightmare-CVE-2025-1974

Shell.so Builder Alpine-based This project allows you to build a shell.so payload using Alpine Linux inside a Docker container. Instructions 1. Clone the repository : git clone cd 2. Build the payload : ./runbuild.sh The compiled shell.so will be generated in the project root directory. ⚠️...

CVE-2025-6002

Exploit for CVE-2025-6002 This script exploits the authenticated arbitrary file upload vulnerability in VirtueMart 4.4.10 CVE-2025-6002, which is described in this blog post: https://blog.blacklanternsecurity.com/p/doomla-zero-days This script logs in to VirtueMart with the given credentials,...

CVE-2007-2447

CVE-2007-2447 To test the script I recommend you the virtual machine "metasploitable 2" available here. The script will display a reverse shell if the exploit works. To get the connection, just open a netcat session like : netcat -lnvp Table of contents Exemples Requirements Payloads Examples py...

cgi-bin-shellshock

How to use Clone the repository or just copy-paste the one you prefer sudo git clone https://github.com/Gurguii/shellshock.sh Run the script Bash bash shellshock.sh -u -h -p Python python3 shellshock.py -u -lh -lp Note: default LPORT is 4444, URL required. If just URL given, it will RCE, else it...