Build software better, together

XiphosResearch / exploits

922

Miscellaneous exploit code

exploits python poc rce php security hacking windows bypass tr-064

Python Updated Feb 11, 2019

1N3 / BlackWidow

462

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

Python Updated Nov 8, 2018

operatorequals / covertutils

396

A framework for Backdoor development!

agent crypto stego rce shell python pentesting post-exploitation handler reverse-shell payload steganography encryption communication-channel stream

Python Updated Mar 18, 2018

jm33-m0 / mec

365

for concurrent exploiting

hacking-tool java-deserialization rce jboss joomla weblogic websphere google-search baidu-search zoomeye wordpress masscan parallelization exploits python adapted-exploits linux ms17-010 censys

Python Updated Jan 1, 2019

JKornev / hidden

303

Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

windows security malware-analysis registry driver kernel rootkit rce

C Updated Dec 19, 2018

tarunkant / Gopherus

293

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

rce ssrf mysql redis zabbix memcache gopher github-rce fastcgi smtp

Python Updated Mar 6, 2019

JoyChou93 / java-sec-code

227

Java常见通用漏洞和修复的代码以及利用payload

java code security xxe rce deserialize tomcat sqli ssrf rmi cors jsonp web spel

Java Updated Mar 6, 2019

petercunha / Jenkins-PreAuth-RCE-PoC

209

😈 Jenkins RCE PoC. From unauthenticated user to remote code execution - it's a hacker's dream! (Chaining CVE-2019-10…

exploit jenkins rce orangetw unauthenticated hacking

Java Updated Feb 21, 2019

opsxcq / exploit-CVE-2017-7494

201

SambaCry exploit and vulnerable container (CVE-2017-7494)

samba sambacry exploit linux rce

C Updated Oct 31, 2017

adamyordan / cve-2019-1003000-jenkins-rce-poc

171

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy)…

jenkins information-security security cve cve-2019-1003000 poc exploit rce security-1266 groovy

JavaScript Updated Feb 19, 2019

xsscx / Commodity-Injection-Signatures

130

Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT

xss http header poc exploit malicious input rce injection javascript html injection-signatures random burpsuite fuzzing burp

HTML Updated Nov 8, 2018

swisskyrepo / DamnWebScanner

124

Another web vulnerabilities scanner, this extension works on Chrome and Opera

sql-injection polyglot-vector web-vulnerabilities-scanner plugin extension webbrowser xss-vulnerability rce lfi scans

Python Updated Sep 25, 2017

XiphosResearch / netelf

90

Run executables from memory, over the network, on Windows, Linux, OpenVMS... routers... spaceships... toasters etc.

rce openvms remote-shell linux win32 in-memory hacking dll memfd

C Updated Sep 28, 2017

ViRb3 / apk-utilities

72

Tools and scripts to manipulate Android APKs

apk android reverse-engineering rce app reversing

Python Updated Feb 21, 2019

theLSA / tp5-getshell

55

thinkphp5 rce getshell

Python Updated Dec 14, 2018

Hual / SA-MP-Plus

47

A client modification for GTA:San Andreas that uses SA-MP's plugin SDK to interact with the SA-MP server and add new …

c-plus-plus gta asi rce reverse sa-mp mod assembly-8086

C++ Updated Sep 11, 2015

vah13 / SAP_vulnerabilities

38

DoS PoC's for SAP products

exploit sap hacking denial-of-service buffer-overflow vulnerability overflow hana rce

Python Updated Jan 23, 2018

Nhoya / MycroftAI-RCE

35

"Zero Click" Remote Code Execution in Mycroft AI vocal assistant

mycroft vulnerability exploit rce

Python Updated Jun 10, 2018

hook-s3c / CVE-2018-18852

32

CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.

cerio router rce 0day exploit cve-2018-18852

Python Updated Jan 26, 2019

t0kx / exploit-CVE-2015-3306

25

ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container

proftpd exploit docker cve-2015-3306 vulnerable-container rce

Python Updated Apr 7, 2018

t0kx / exploit-CVE-2016-9920

18

Roundcube 1.0.0 <= 1.2.2 Remote Code Execution exploit and vulnerable container

roundcube docker vulnerable-container exploit cve-2016-9920 rce

Python Updated Jan 6, 2017

dhn / OSCE

18

Some exploits, which I’ve created during my OSCE preparation.

exploits osce rce dep bypass seh remote local bof templates tools

Python Updated Jul 7, 2018

rcenvironment / rce

17

Distributed, workflow-driven integration environment

distributed-systems distributed-computing aerospace rocket-science rce workflow-engine

Java Updated Nov 16, 2018

t0kx / exploit-CVE-2015-1427

16

Elasticsearch 1.4.0 < 1.4.2 Remote Code Execution exploit and vulnerable container

docker elasticsearch rce cve-2015-1427 vulnerable-container

Shell Updated Apr 7, 2018

aadityapurani / NodeJS-Red-Team-Cheat-Sheet

16

NodeJS Red-Team Cheat Sheet

nodejs node hacking rce command injection

Updated Jan 12, 2019

aryanrtm / Crascan

14

Crascan is a simple LFI, RFI, RCE, and Joomla Components vulnerability scanner.

vulnerability-scanner rfi lfi rce pentesting exploit admin-finder shell shell-backdoor

Shell Updated Nov 4, 2018

mpgn / CVE-2018-19276

13

CVE-2018-19276 - OpenMRS Insecure Object Deserialization RCE

openmrs rce

Python Updated Mar 11, 2019

hktalent / weblogic_java_des

7

weblogic T3 collections java InvokerTransformer Transformer InvokerTransformer weblogic.jndi.WLInitialContextFactory

weblogic collections java invokertransformer transformer deserialization exploit tools hacker rce remote-control remote-execution hacking-tool

Java Updated Feb 27, 2018

theLSA / ecshop-getshell

7

ecshop rce getshell

Python Updated Dec 5, 2018

mpgn / Slanger-RCE

6

RCE in Slanger using deserialization of Ruby objects

rce slanger

Python Updated Mar 19, 2019

Please note that GitHub no longer supports Internet Explorer.

rce

Repositories 54