All Categories → Security → rce

Top 70 rce open source projects

Redis Rogue Server

Redis 4.x/5.x RCE

✭ 243

python redis rce

Run executables from memory, over the network, on Windows, Linux, OpenVMS... routers... spaceships... toasters etc.

✭ 220

c linux hacking dll win32 rce in-memory

CVE-2020-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule

✭ 207

lua microsoft windows-10 cve rce suricata

XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities

✭ 175

shell bugbounty recon cors rce sqli

An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability

✭ 172

go vulnerability xss rce

DDoor - cross platform backdoor using dns txt records

✭ 168

cross-platform dns malware backdoor rce

Weblogic coherence.jar RCE

✭ 168

Springbootvulexploit

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

✭ 3,196

java python HTML springboot springcloud rce vulnerability springboot-actuator-rce spring-boot-vulnerability spring-vulnerability spring-actuator-vulnerability

🛠 Tools and scripts to manipulate Android APKs

✭ 134

python android reverse-engineering app apk adb rce

thinkphp5 rce getshell

✭ 126

python rce thinkphp5

Cve 2019 0708 bluekeep rce

bluekeep exploit

✭ 121

exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts

✭ 108

python kibana rce

RCE for old gitlab version <= 11.4.7 & 12.4.0-12.8.1 and LFI for old gitlab versions 10.4 - 12.8.1

✭ 104

python exploit ctf gitlab cve rce

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

✭ 103

python security pentesting penetration-testing pentest-tool exploitation vulnerability-scanners vulnerability-detection rce vulnerability-assessment websecurity

Hacking tools

✭ 95

http automation hacking dns tcp bugbounty fuzzing xss poc owasp rce csrf sqli

Cve 2019 0708 Tool

A social experiment

✭ 87

python cpp hack windows hacking tool exploit poc cve rce stars

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

✭ 1,258

python mysql redis postgresql smtp zabbix rce memcache fastcgi

Cisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)

✭ 73

python exploit poc rce

Miscellaneous exploit code

✭ 1,157

python security windows hacking poc exploits bypass rce

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞利用功能

✭ 1,079

python security security-tools pentesting scanner exploit pentest-tool vulnerabilities cve rce

Java web common vulnerabilities and security code which is base on springboot and spring security

✭ 1,033

java security web benchmark code tomcat cors rce sqli jsonp

CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.

✭ 42

python router exploit rce

Exploit Cve 2016 9920

Roundcube 1.0.0 <= 1.2.2 Remote Code Execution exploit and vulnerable container

✭ 34

python docker exploit rce

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

✭ 887

python web spider scanner osint bugbounty application vulnerability xss owasp fuzzer rce scan csrf automated sqli

Notes about attacking Jenkins servers

✭ 841

python hacking exploit pentest jenkins rce

Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

✭ 768

c security windows kernel driver malware-analysis registry rce rootkit

Hackerone Reports

Top disclosed reports from HackerOne

✭ 458

python bugbounty xss rce sql-injection csrf reports

for mass exploiting

✭ 448

python linux hacking-tool exploits rce parallelization

A framework for Backdoor development!

✭ 424

python shell pentesting encryption stream crypto agent payload post-exploitation reverse-shell rce handler steganography

Redis Rogue Server

Redis(<=5.0.5) RCE

✭ 400

Cve 2020 0796 Rce Poc

CVE-2020-0796 Remote Code Execution POC

✭ 359

Remote Command Execution as SYSTEM on Windows IoT Core (releases available for Python2.7 & Python3)

✭ 326

python raspberry-pi exploit raspberrypi rce

Getting started with java code auditing 代码审计入门的小项目

✭ 289

javascript java sql code xss rce jackson fastjson

Penetration testing poc

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

Cve 2019 1003000 Jenkins Rce Poc

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

✭ 270

javascript groovy security exploit jenkins poc cve information-security rce

Commodity Injection Signatures

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

✭ 267

javascript html http exploit fuzzing input xss poc injection random burpsuite rce header

😈 Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!

✭ 262

java hacking exploit jenkins rce

Exploit Cve 2017 7494

SambaCry exploit and vulnerable container (CVE-2017-7494)

✭ 265

c linux exploit rce samba

Another web vulnerabilities scanner, this extension works on Chrome and Opera

✭ 254

python plugin extension rce sql-injection scans

CVE-2018-19276 - OpenMRS Insecure Object Deserialization RCE

✭ 17

python rce openmrs

Exploit-Development

Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)

✭ 84

python C++ruby c windows kernel exploit poc rce rop rop-exploitation rop-gadgets aslr lpe 0day rop-chain eop aslr-bypass

Log4j-RCE-Scanner

Remote command execution vulnerability scanner for Log4j.

✭ 200

shell log4j checker scanner rce vulnerability-scanners log4j2 cve-2021-44228 log4shell

JAVA 漏洞靶场 (Vulnerability Environment For Java)

✭ 228

HTML java Dockerfile docker cors rce vulnerability csrf xss-vulnerability springboot fastjson ssrf sqlinjection

BugBounty Tool

✭ 40

python crawler code checker injection hacking subdomain rce response bugbounty struts2 bb hacking-tool bugcrowd hackerone h1 sudomains

PoC-CVE-2021-41773

No description or website provided.

✭ 39

python apache poc rce cve lfi

Hi! Agentgo is a tool for making remote command executions from server to client with golang, protocol buffers (protobuf) and grpc.

✭ 15

go protobuf protocol-buffers grpc rce cc

ecshop-getshell

ecshop rce getshell

✭ 29

python rce ecshop getshell

CVE-2022-21907-http.sys

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers

✭ 67

python crash poc rce iis-server cve-2022-21907

NodeJS-Red-Team-Cheat-Sheet

NodeJS Red-Team Cheat Sheet

✭ 121

nodejs security node command injection hacking rce payloads nodejs-security

Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution

✭ 61

python proof-of-concept exploit umbraco poc rce umbraco-cms umbraco-v7 remote-code-execution umbraco7

Some exploits, which I’ve created during my OSCE preparation.

✭ 74

python tools local templates remote exploits rce bypass dep seh osce bof

RCE-python-oneliner-payload

Python bind shell single line code for both Unix and Windows, used to find and exploit RCE (ImageMagick, Ghostscript, ...)

✭ 23

windows ghostscript imagemagick unix rce bind one-liner one-line cve-2016-3714 cve-2018-16509

🏴‍☠️ Pwn misconfigured sites running ShareX custom image uploader API through chained exploit

✭ 30

python http exploit tool web-shell penetration-testing rce vulnerability sharex rfi web-exploitation remote-file-inclusion remote-code-execution vulnx custom-file-uploader sharex-api pwnx custom-image-uploader

exploit code for F5-Big-IP (CVE-2020-5902)

✭ 37

python exploits rce hacking-tool f5-bigip cve-2020-5902

CVE-2021-41773 CVE-2021-42013

Apache HTTP Server 2.4.49, 2.4.50 - Path Traversal & RCE

✭ 20

shell exploit apache rce cve pentest payload

exploit-CVE-2015-3306

ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container

✭ 97

python shell docker proftpd exploit rce vulnerable-container cve-2015-3306

Some personal exploits/pocs

✭ 52

c C#python Dockerfile shell windows linux security research exploits poc rce cve lpe

spring-boot-upload-file-lead-to-rce-tricks

spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧

✭ 517

java HTML Dockerfile spring-boot rce vulnerability upload-file

An All-In-One Pure Python PoC for CVE-2021-44228

✭ 179

python java cli log4j rce cve-2021-44228

Distributed, workflow-driven integration environment

✭ 42

java HTML Gherkin python XSLT groovy distributed-systems workflow-engine aerospace distributed-computing rce rocket-science

1-60 of 70 rce projects