CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

Redis 4.x/5.x RCE

CVE-2020-0796 Remote Code Execution POC

The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..

Local File Inclusion discovery and exploitation tool

Realtime Collaborate Editor with Embedded Compiler

All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:

Exploit for CVE-2019-9810 Firefox on Windows 64-bit.

Code execution via Python package installation.

Have you ever wondered how code execution on competitive programming websites like leetcode works? Code that runs code. Tried implementing that.

gRPC-based Remote Command Execution Agent

A remote code running service.

Vulnerable Client-Server Application (VuCSA) is made for learning how to perform penetration tests of non-http thick clients. It is written in Java (with JavaFX graphical user interface) and contains multiple challenges including SQL injection, RCE, XML vulnerabilities and more.

Hacking Hotspots: Pre-Auth Remote Code Execution, Arbitrary SMS & Adjacent Attacks on 5G & 4G/LTE Routers

PHP 8.1.0-dev Backdoor System Shell Script

Chrome-RCE-Poc

Simulating Log4j Remote Code Execution (RCE) vulnerability in a flask web server using python's logging library with custom formatter that simulates lookup substitution by executing remote exploit code.

Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution

CVE-2022-41852 Proof of Concept (unofficial)

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.

Laravel RCE Exploitation Toolkit

Juniper Firewalls CVE-2023-36845 - RCE

A PoC exploit for CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution (RCE)

CVE-2023-22515

No description provided.

CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)

Connect Box CH7465LG (CVE-2019-13025)

CVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server