remote-code-execution

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

CVE-2020-0796 Remote Code Execution POC

Redis 4.x/5.x RCE

The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..

Local File Inclusion discovery and exploitation tool

Realtime Collaborate Editor with Embedded Compiler

All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:

Exploit for CVE-2019-9810 Firefox on Windows 64-bit.

[PoC] Atlassian Confluence (CVE-2022-26134) - Unauthenticated OGNL injection vulnerability (RCE)

Code execution via Python package installation.

Have you ever wondered how code execution on competitive programming websites like leetcode works? Code that runs code. Tried implementing that.

gRPC-based Remote Command Execution Agent

A remote code running service.

Vulnerable Client-Server Application (VuCSA) is made for learning how to perform penetration tests of non-http thick clients. It is written in Java (with JavaFX graphical user interface) and contains multiple challenges including SQL injection, RCE, XML vulnerabilities and more.

PHP 8.1.0-dev Backdoor System Shell Script

Simulating Log4j Remote Code Execution (RCE) vulnerability in a flask web server using python's logging library with custom formatter that simulates lookup substitution by executing remote exploit code.

Chrome-RCE-Poc

CVE-2022-41852 Proof of Concept (unofficial)