Every new exploit,
on the radar.

Ghostcat read file/code execute,CNVD-2020-10487(CVE-2020-1938)

tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含

Cnvd-2020-10487 / cve-2020-1938, scanner tool

Tomcat常见漏洞GUI利用工具。CVE-2017-12615 PUT文件上传漏洞、tomcat-pass-getshell 弱认证部署war包、弱口令爆破、CVE-2020-1938 Tomcat AJP文件读取/包含

Tomcat的文件包含及文件读取漏洞利用POC

CVE-2020-1938漏洞复现

tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938/CNVD-2020-10487 文件包含

Tomcat常见漏洞GUI利用工具。CVE-2017-12615 PUT文件上传漏洞、tomcat-pass-getshell 弱认证部署war包、弱口令爆破、CVE-2020-1938 Tomcat AJP文件读取/包含

POC Exploit for Apache Tomcat 7.0.x CVE-2017-12615 PUT JSP vulnerability.

just a python script for cve-2017-12615

Tomcat PUT方法任意文件写入（CVE-2017-12615）exp

CVE-2017-12617 and CVE-2017-12615 for tomcat server

CVE-2017-12615 Tomcat RCE (TESTED)

tomcat-put-cve-2017-12615

Basic PoC for CVE-2023-27524: Insecure Default Configuration in Apache Superset

Apahce-Superset身份认证绕过漏洞(CVE-2023-27524)检测工具

Apache Superset Auth Bypass (CVE-2023-27524)

Apache Superset Auth Bypass Vulnerability CVE-2023-27524.

Perform With Apache-SuperSet Leaked Token [CSRF]

Apache Superset - Authentication Bypass

Tool for finding CVE-2023-27524 (Apache Superset - Authentication Bypass)

Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965

Dockerized Spring4Shell (CVE-2022-22965) PoC application and exploit

burpsuite 的Spring漏洞扫描插件。SpringVulScan：支持检测：路由泄露|CVE-2022-22965|CVE-2022-22963|CVE-2022-22947|CVE-2016-4977

Spring4Shell - Spring Core RCE - CVE-2022-22965

CVE-2022-22965\Spring-Core-RCE核弹级别漏洞的rce图形化GUI一键利用工具，基于JavaFx开发，图形化操作更简单，提高效率。

Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive)

SpringFramework 远程代码执行漏洞CVE-2022-22965

CVE-2022-22965写入冰蝎webshell脚本

spring-cloud / spring-cloud-function,spring.cloud.function.routing-expression,RCE,0day,0-day,POC,EXP,CVE-2022-22963

CVE-2022-22963 PoC

CVE-2022-22963 is a vulnerability in the Spring Cloud Function Framework for Java that allows remote code execution. This python script will verify if the vuln…

Spring Cloud Function Vulnerable Application / CVE-2022-22963

CVE-2022-22963 Spring-Cloud-Function-SpEL_RCE_exploit

This includes CVE-2022-22963, a Spring SpEL / Expression Resource Access Vulnerability, as well as CVE-2022-22965, the spring-webmvc/spring-webflux RCE termed …

CVE-2022-22947

CVE-2022-22947 注入Godzilla内存马

Spring Cloud Gateway 远程代码执行漏洞Exp Spring_Cloud_Gateway_RCE_Exp-CVE-2022-22947

CVE-2022-22947批量

Spring Cloud Gateway Actuator API SpEL表达式注入命令执行（CVE-2022-22947） 注入哥斯拉内存马

Spring Cloud Gateway < 3.0.7 & < 3.1.1 Code Injection (RCE)

CVE-2022-22947_EXP,CVE-2022-22947_RCE,CVE-2022-22947反弹shell,CVE-2022-22947 getshell

SpringCloudGatewayRCE - CVE-2022-22947 / Code By:Tas9er

Spring Data Commons RCE 远程命令执行漏洞

POC for CVE-2018-1273

Environment for CVE-2018-1273 (Spring Data Commons)

cve-2018-1273

Vulhub spring/CVE-2018-1273: Spring Data Commons SpEL Injection (CVE-2018-1273), run with Isoloom

Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020…

Solr_CVE-2019-17558

CVE-2019-17558 Solr模板注入漏洞图形化一键检测工具。CVE-2019-17558 Solr Velocity Template Vul POC Tool.

Apache Solr 1.4 Injection to get a shell

Vulhub solr/CVE-2019-17558: Apache Solr Velocity Template RCE (CVE-2019-17558), run with Isoloom

CVE-2016-4437-Shiro反序列化爆破模块和key,命令执行，反弹shell的脚本

一个针对shiro反序列化漏洞(CVE-2016-4437)的快速利用工具/A simple tool targeted at shiro framework attacks with ysoserial.

Python POC to Exploit CVE-2016-4437 Apache Shiro Deserialization Vulnerability Due to Hardcode Encryption Key

这是基于cve-2016-4437简单的漏洞复现代码

1.验证CVE-2016-4437、2.解析rememberMe的文件和CBC加密的IV偏移

Vulhub shiro/CVE-2016-4437: Shiro 1.2.4 rememberMe deserialization, run with Isoloom

SambaCry exploit and vulnerable container (CVE-2017-7494)

Remote root exploit for the SAMBA CVE-2017-7494 vulnerability

Proof-of-Concept exploit for CVE-2017-7494(Samba RCE from a writable share)

CVE-2017-7494 - Detection Scripts

It is a simple script to exploit RCE for Samba (CVE-2017-7494 ).

SambaCry (CVE-2017-7494) exploit for Samba | bind shell without Metasploit

CVE-2017-7494 python exploit

Exploit CVE-2017-7494 for Net Security course final Assignment. This would reveal the vulnerability of services that run in administrative priority on Linux.

PoC exploit of CVE-2020-11651 and CVE-2020-11652

Salt security backports for CVE-2020-11651 & CVE-2020-11652

CVE-2020-11651: Proof of Concept

CVE-2020-11651&&CVE-2020-11652 EXP

Checks for CVE-2020-11651 and CVE-2020-11652

PoC for CVE-2020-11651

CVE-2020-11651&&CVE-2020-11652 EXP

CVE-2022-0543_RCE,Redis Lua沙盒绕过 命令执行

Redis 沙盒逃逸（CVE-2022-0543）POC&EXP

redis未授权、redis_CVE-2022-0543检测利用二合一脚本

Redis RCE through Lua Sandbox Escape vulnerability

CVE-2022-0543 - Redis RCE Vulnerability home lab for Red Teaming, Penetration Testing Training with just one DOCKER

Vulhub redis/CVE-2022-0543: Redis Lua Sandbox Escape (CVE-2022-0543), run with Isoloom

CVE-2019-5418 - File Content Disclosure on Ruby on Rails

RCE on Rails 5.2.2 using a path traversal (CVE-2019-5418) and a deserialization of Ruby objects (CVE-2019-5420)

A multi-threaded Golang scanner to identify Ruby endpoints vulnerable to CVE-2019-5418

File Content Disclosure on Rails Test Case - CVE-2019-5418

a demo for Ruby on Rails CVE-2019-5418

Ruby on Rails是一个 Web 应用程序框架,是一个相对较新的 Web 应用程序框架，构建在 Ruby 语言之上。这个漏洞主要是由于Ruby on Rails使用了指定参数的render file来渲染应用之外的视图，我们可以通过修改访问某控制器的请求包，通过“…/…/…/…/”来达到路径穿越的目的，然后再…

Rails 3 PoC of CVE-2019-5418

CVE-2019–9193 - PostgreSQL 9.3-12.3 Authenticated Remote Code Execution

is a PoC tool designed to exploit an authenticated Remote Code Execution (RCE) vulnerability in specific versions of PostgreSQL (9.3 - 11.7)

PostgreSQL Remote Code Executuon

PoC tool designed to exploit an authenticated Remote Code Execution (RCE) vulnerability in certain versions of PostgreSQL (9.3 - 11.7)

This lab simulates CVE-2019-9193 - PostgreSQL COPY FROM PROGRAM RCE

Tool to try multiple paths for PHPunit RCE CVE-2017-9841

Masscanner for Laravel phpunit RCE CVE-2017-9841

PHPUnit RCE

(CVE-2017-9841) PHPUnit_eval-stdin_php Remote Code Execution

PHPunit Checker CVE-2017-9841 By MrMad

A Tool for scanning CVE-2017-9841 with multithread

PHPUnit CVE-2017-9841 Scanner in Go clean and fire.

RCE exploit for PHP Unit 5.6.2

MongoDB CVE-2025-14847 Heap Memory Leak Scanner | OP_COMPRESSED zlib Vulnerability | Bug Bounty & Red Team Tool

a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensitive data from vulnera…

poc for CVE-2025-14847

MongoDB 内存泄露漏洞 (CVE-2025-14847) 检测工具

Exploit lab, docker and code scanner for mongobleed Vulnerability CVE-2025-14847 plus Phoenix Security Sync tools

Academic proof-of-concept demonstrating CVE-2025-14847 for authorized security research.

CVE-2025-14847 (MongoBleed)

Explot, Lab, Scanner - external and docker container, for SMongobleed-CVE-2025-14847 plus phoenix security uploader

Exploit for CVE-2019-11043

(PoC) Python version of CVE-2019-11043 exploit by neex

php-fpm+Nginx RCE

Ladon POC Moudle CVE-2019-11043 (PHP-FPM + Ngnix)

CVE-2019-11043 PHP7.x RCE

This repository provides a dockerized infrastructure and a python implementation of the CVE-2019-11043 exploit.

Docker image and commands to check CVE-2019-11043 vulnerability on nginx/php-fpm applications.

PHP CGI Argument Injection.

PHP-CGI-REMOTE_CVE-2012-1823, UnrealIRCd, MySQL, PostgreSQL and SSH bruteforce, VSFTPD2.3.4, samba CVE-2007-2447, JAVA RMI Server, distcc daemon, misconfigured…

First script, pgp-cgi-cve-2012-1823 BASH script

CVE-2012-1823 exploit for https user password website.

A hands-on project demonstrating the setup of virtual security lab, network reconnaissance, and exploitation of CVE-2012-1823.

Exploited a known RCE vulnerability (PHP-CGI Argument Injection, CVE-2012-1823) on Metasploitable2 using Metasploit Framework, gained a shell, and documented p…

A checker (site and tool) for CVE-2014-0160

Multi-threaded tool for scanning many hosts for CVE-2014-0160.

OpenSSL CVE-2014-0160 Heartbleed vulnerability test

Heartbleed (CVE-2014-0160) client exploit

Test for SSL heartbeat vulnerability (CVE-2014-0160)

OpenSSL Heartbleed (CVE-2014-0160) vulnerability scanner, data miner and RSA key-restore tools.

:broken_heart: Hearbleed exploit to retrieve sensitive information CVE-2014-0160 :broken_heart:

OpenSSL TLS heartbeat read overrun (CVE-2014-0160)

Exploit written in Python for CVE-2018-15473 with threading and export formats

OpenSSH 2.3 up to 7.4 Mass Username Enumeration (CVE-2018-15473).

Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473

OpenSSH 2.3 < 7.7 - Username Enumeration

OpenSSH 7.7 - Username Enumeration

SSH User Enumerator in Python3, CVE-2018-15473, I updated the code of this exploit (https://www.exploit-db.com/exploits/45939) to work with python3 instead of …

CVE-2018-15473 - Opensshenum is an user enumerator exploiting an OpenSsh bug

CVE-2018-15473 Exploit

Python exploit of cve-2020-7247

OpenSMTPD 6.4.0 - 6.6.1 Remote Code Execution PoC exploit

Proof Of Concept Exploit for CVE-2020-7247 (Remote Execution on OpenSMTPD < 6.6.2

OpenSMTPD version 6.6.2 remote code execution exploit

Proof of concept for CVE-2020-7247 for educational purposes.

Worm written in python, abuses CVE-2020-7247

PoC exploit for CVE-2020-7247 OpenSMTPD 6.4.0 < 6.6.1 Remote Code Execution

rce

Openfire Console Authentication Bypass Vulnerability with RCE plugin

Perform With Massive Openfire Unauthenticated Users

CVE-2023-32315-Openfire-Bypass

Tool for CVE-2023-32315 exploitation

Openfire未授权到RCE(CVE-2023-32315)复现

This repo is a PoC with to exploit CVE-2023-51467 and CVE-2023-49070 preauth RCE vulnerabilities found in Apache OFBiz.

Apache OfBiz Auth Bypass Scanner for CVE-2023-51467

A go-exploit for Apache OFBiz CVE-2023-51467

CVE-2023-51467 POC

Auto exploit script for the Java web framework OF Biz under CVE-2023-51467.

🚨 Just completed an incident report on Event ID 217: Apache OFBiz Auth Bypass and Code Injection 0-Day (CVE-2023-51467). This critical vulnerability allows att…

Vulhub ofbiz/CVE-2023-51467: Apache OFBiz Authentication Bypass to RCE (CVE-2023-51467), run with Isoloom

CVE-2017-7529_PoC

CVE-2017-7529 | nginx on the range 0.5.6 - 1.13.2

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of pote…

CVE-2017-7529

CVE-2017-7529: Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting in…

This is used to scan for CVE-2012-2122 vulnerable servers.

CVE-2012-2122 MySQL Authentication Bypass Home Lab

Vulhub mysql/CVE-2012-2122: MySQL Authentication Bypass (CVE-2012-2122), run with Isoloom