rce

There are 37 repositories under rce topic.

Mr-xn / Penetration_Testing_POC
渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
penetration-testing poc getshell csrf penetration-testing-poc csrf-webshell cve rce sql-poc poc-exp bypass oa-getshell cve-cms php-bypass thinkphp sql-getshell authentication-bypass cobalt-strike exploit
Language:HTML 6147
LandGrey / SpringBootVulExploit
SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list
springboot springboot-actuator-rce rce spring-boot-vulnerability springcloud spring-vulnerability vulnerability spring-actuator-vulnerability
Language:Java 5512
zhzyker / vulmap
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
exploit cve rce vulnerabilities cve-2016-4437 security security-tools pentesting pentest-tool cve-2020-14882 cve-2020-2555 cve-2020-2883 scanner cve-2020-13942 cve-2020-17518 cve-2021-21972 cve-2021-26855 cve-2021-27065 cve-2021-21975 cve-2021-3129
Language:Python 3270
reddelexc / hackerone-reports
Top disclosed reports from HackerOne
bugbounty csrf hackerone idor rce reports security sql-injection ssrf writeups xss xxe
Language:Python 3190
tarunkant / Gopherus
This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
rce ssrf mysql redis zabbix memcache gopher github-rce fastcgi smtp postgresql
Language:Python 2664
JoyChou93 / java-sec-code
Java web common vulnerabilities and security code which is base on springboot and spring security
java code security xxe rce deserialize tomcat sqli ssrf rmi cors jsonp web spel benchmark
Language:Java 2254
tr0uble-mAker / POC-bomber
利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点
cve exp getshell poc poc-bomber rce redteam vulnerability-scanner
Language:Python 2114
pwn_jenkins
gquere / pwn_jenkins
Notes about attacking Jenkins servers
jenkins pentest hacking exploit rce
Language:Python 1887
insightglacier / Dictionary-Of-Pentesting
Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
pentesting fuzzing bruteforce bugbounty dictionary websecurity iot-security password pentest regex-pattern dns subdomain database wifi bugbountytips bughunting-methodology fingerprint rce spring-boot payloads
Language:Shell 1824
p0dalirius / Awesome-RCE-techniques
Awesome list of step by step techniques to achieve Remote Code Execution on various apps!
rce framework awesome-list code execution exploit bugbounty cms
Language:Dockerfile 1802
JKornev / hidden
🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
windows security malware-analysis registry driver kernel rootkit rce
Language:C 1598
XiphosResearch / exploits
Miscellaneous exploit code
bypass exploits hacking php poc python rce security tr-064 windows
Language:Python 1484
1N3 / BlackWidow
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
web application scanner osint fuzzer owasp vulnerability python spider passive active sqli xss lfi rfi rce csrf automated scan bugbounty
Language:Python 1457
pen4uin / java-memshell-generator-release
一款支持高度自定义的 Java 内存马生成工具
java memshell payload rce webshell
1152
nemesida-waf / waf-bypass
Check your WAF before an attacker does
waf python3 bypass python rce xss waf-bypass-tool api-security-testing lfi nosql-injection path-traversal rfi sqli-injection graphql-injection ssti waf-testing
Language:Python 1098
n0b0dyCN / redis-rogue-server
Redis(<=5.0.5) RCE
rce redis
Language:C 934
cn-panda / JavaCodeAudit
Getting started with java code auditing 代码审计入门的小项目
vulnerability-analysis ssrf java rce fastjson jackson xss sql code weblogic
Language:JavaScript 840
klezVirus / CVE-2021-40444
CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit
cve-2021-40444 msword office 0day rce remote-code-execution
Language:HTML 780
LandGrey / spring-boot-upload-file-lead-to-rce-tricks
spring boot Fat Jar 任意写文件漏洞到稳定 RCE 利用技巧
rce spring-boot upload-file vulnerability
Language:Java 649
SSTImap
vladko312 / SSTImap
Automatic SSTI detection tool with interactive interface
information-security penetration-testing penetration-testing-tools pentest pentest-tool pentesting pentesting-tools python rce ssti
Language:Python 645
GhostTroops / TOP
TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
bugbounty cve exp exploit payload poc rce vulnerability
Language:Shell 622
mec
jm33-m0 / mec
for mass exploiting
hacking-tool rce weblogic google-search baidu-search zoomeye masscan parallelization exploits python adapted-exploits linux censys ssh-bruteforce prompt-toolkit mec
Language:Python 590
lintstar / About-Attack
一个旨在通过应用场景 / 标签对 Github 红队向工具 / 资源进行分类收集，降低红队技术门槛的手册【持续更新】
attack attack-defense redteam redteam-tools rce intranet-penetration automation opensource
584
jamf / CVE-2020-0796-RCE-POC
CVE-2020-0796 Remote Code Execution POC
cve-2020-0796 poc smbghost remote-code-execution rce
Language:Python 510
kraken-ng / Kraken
Kraken, a modular multi-language webshell coded by @secu_x11
red-team security webshell evasion rce
Language:Python 496
Li4n0 / revsuit
RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.
pentest-tool ssrf xxe rce reverse-connection bug-bounty dnslog oob out-of-band
Language:Go 488
Mr-xn / sunlogin_rce
向日葵 RCE
sunloginclient rce
Language:Go 472
chennqqi / godnslog
An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability
dnslog xss ssrf rce xxe rfi webscan vulnerability
Language:Go 468
Dliv3 / redis-rogue-server
Redis 4.x/5.x RCE
rce redis redis-rogue-server redis-unauthorized-access remote-code-execution ssrf
Language:Python 455
SummerSec / SpringExploit
🚀 一款为了学习go而诞生的漏洞利用工具
spring function go rce spel gatwway spel-rce big big-f5
Language:Go 441
operatorequals / covertutils
A framework for Backdoor development!
agent crypto stego rce shell python pentesting post-exploitation handler reverse-shell payload steganography encryption communication-channel stream
Language:Python 438
swisskyrepo / DamnWebScanner
Another web vulnerabilities scanner, this extension works on Chrome and Opera
sql-injection polyglot-vector web-vulnerabilities-scanner plugin extension webbrowser xss-vulnerability rce lfi scans
Language:Python 436
brightio / penelope
Penelope Shell Handler
pty tty ctf-tools rce ctf python reverse-shell bind-shell shell-handler
Language:Python 408
tangxiaofeng7 / SecExample
JAVA 漏洞靶场 (Vulnerability Environment For Java)
docker java springboot xss-vulnerability vulnerability ssrf rce fastjson cors sqlinjection csrf
Language:HTML 406
xsscx / Commodity-Injection-Signatures
Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
xss http header poc exploit malicious input rce injection javascript html injection-signatures random burpsuite fuzzing burp
Language:HTML 378
opsxcq / exploit-CVE-2017-7494
SambaCry exploit and vulnerable container (CVE-2017-7494)
samba sambacry exploit linux rce
Language:C 369

rce

Mr-xn / Penetration_Testing_POC

LandGrey / SpringBootVulExploit

zhzyker / vulmap

reddelexc / hackerone-reports

tarunkant / Gopherus

JoyChou93 / java-sec-code

tr0uble-mAker / POC-bomber

gquere / pwn_jenkins

insightglacier / Dictionary-Of-Pentesting

p0dalirius / Awesome-RCE-techniques

JKornev / hidden

XiphosResearch / exploits

1N3 / BlackWidow

pen4uin / java-memshell-generator-release

nemesida-waf / waf-bypass

n0b0dyCN / redis-rogue-server

cn-panda / JavaCodeAudit

klezVirus / CVE-2021-40444

LandGrey / spring-boot-upload-file-lead-to-rce-tricks

vladko312 / SSTImap

GhostTroops / TOP

jm33-m0 / mec

lintstar / About-Attack

jamf / CVE-2020-0796-RCE-POC

kraken-ng / Kraken

Li4n0 / revsuit

Mr-xn / sunlogin_rce

chennqqi / godnslog

Dliv3 / redis-rogue-server

SummerSec / SpringExploit

operatorequals / covertutils

swisskyrepo / DamnWebScanner

brightio / penelope

tangxiaofeng7 / SecExample

xsscx / Commodity-Injection-Signatures

opsxcq / exploit-CVE-2017-7494