rce-exploit

WPS-Office 1-Click RCE exp 202308091546

CVE-2023-33246 RocketMQ RCE Detect By Version and Exploit

Exploit for Grafana arbitrary file-read and RCE (CVE-2024-9264)

Chrome-RCE-Poc

Websites Vulnerability Scanner

Modular framework to exploit UPS devices

WConsole Extractor is a python library which automatically exploits a Werkzeug development server in debug mode. You just have to write a python function that leaks a file content and you have your shell :)

Apache OFBiz RCE Scanner & Exploit (CVE-2024-38856)

POC - CVE-2024–10914- Command Injection Vulnerability in `name` parameter for D-Link NAS

POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692

CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)

This is a script written in Python that allows the exploitation of the Metabase's software security flaw described in CVE-2023-38646.

PHP RCE PoC for CVE-2024-4577 written in bash, go, python and a nuclei template

Apache OFBIZ Path traversal leading to RCE POC[CVE-2024-32113 & CVE-2024-36104]

WonderCMS Authenticated RCE - CVE-2023-41425

This is a script written in Python that allows the exploitation of the Chamilo's LMS software security flaw described in CVE-2023-4220

大华智慧园区系统sso_initsession文件上传批量脚本

Compromise a web application and delve deeper into the network to access hosts that you cannot directly reach from your attack host using different approaches.

A fully public exploit of the CVE-2020-0022 BlueFrag Android RCE Vulnerability (tested on Pixel 3 XL)

VFGadget locator to facilitate Counterfeit Object-Oriented Programming (COOP) and Loop-Oriented Programming (LOP) attacks to bypass advanced security protections like Intel CET and Control-Flow Guard (CFG) to achieve Remote Code Execution.