Awesome Open Source
Awesome Open Source
Combined Topics
rce
x
Advertising
📦 9
All Projects
Application Programming Interfaces
📦 120
Applications
📦 181
Artificial Intelligence
📦 72
Blockchain
📦 70
Build Tools
📦 111
Cloud Computing
📦 79
Code Quality
📦 28
Collaboration
📦 30
Command Line Interface
📦 48
Community
📦 81
Companies
📦 60
Compilers
📦 60
Computer Science
📦 74
Configuration Management
📦 39
Content Management
📦 167
Control Flow
📦 197
Data Formats
📦 77
Data Processing
📦 266
Data Storage
📦 132
Economics
📦 60
Frameworks
📦 198
Games
📦 122
Graphics
📦 103
Hardware
📦 148
Integrated Development Environments
📦 47
Learning Resources
📦 147
Legal
📦 28
Libraries
📦 119
Lists Of Projects
📦 21
Machine Learning
📦 336
Mapping
📦 61
Marketing
📦 15
Mathematics
📦 55
Media
📦 228
Messaging
📦 97
Networking
📦 304
Operating Systems
📦 84
Operations
📦 120
Package Managers
📦 52
Programming Languages
📦 229
Runtime Environments
📦 96
Science
📦 42
Security
📦 375
Social Media
📦 26
Software Architecture
📦 70
Software Development
📦 68
Software Performance
📦 57
Software Quality
📦 127
Text Editors
📦 45
Text Processing
📦 131
User Interface
📦 310
User Interface Components
📦 465
Version Control
📦 29
Virtualization
📦 68
Web Browsers
📦 38
Web Servers
📦 25
Web User Interface
📦 194
The Top 166 Rce Open Source Projects on Github
Categories
>
Security
>
Rce
Penetration_testing_poc
⭐
3,484
有关渗透测试的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss penetration-testing-poc csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms
Vulmap
⭐
1,710
Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能
Springbootvulexploit
⭐
1,631
SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list
Gopherus
⭐
1,312
This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
Java Sec Code
⭐
1,207
Java web common vulnerabilities and security code which is base on springboot and spring security
Exploits
⭐
1,177
Miscellaneous exploit code
Blackwidow
⭐
935
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
Pwn_jenkins
⭐
902
Notes about attacking Jenkins servers
Hidden
⭐
897
Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
Dictionary Of Pentesting
⭐
724
Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
Goby
⭐
622
Attack surface mapping
Hackerone Reports
⭐
567
Top disclosed reports from HackerOne
Mec
⭐
440
for mass exploiting
Covertutils
⭐
412
A framework for Backdoor development!
Javacodeaudit
⭐
391
Getting started with java code auditing 代码审计入门的小项目
Sireprat
⭐
332
Remote Command Execution as SYSTEM on Windows IoT Core (releases available for Python2.7 & Python3)
Commodity Injection Signatures
⭐
287
Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
Jenkins Rce
⭐
274
😈 Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!
Redis Rogue Server
⭐
261
Redis(<=5.0.5) RCE
Cve 2019 1003000 Jenkins Rce Poc
⭐
254
Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)
Exploit Cve 2017 7494
⭐
235
SambaCry exploit and vulnerable container (CVE-2017-7494)
Godnslog
⭐
227
An exquisite dns&http log server for verify SSRF/XXE/RFI/RCE vulnerability
Damnwebscanner
⭐
213
Another web vulnerabilities scanner, this extension works on Chrome and Opera
Xrcross
⭐
204
XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities
Redis Rogue Server
⭐
199
Redis 4.x/5.x RCE
Cve 2020 16898
⭐
197
CVE-2020-16898 (Bad Neighbor) Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule
Ddoor
⭐
173
DDoor - cross platform backdoor using dns txt records
Netelf
⭐
165
Run executables from memory, over the network, on Windows, Linux, OpenVMS... routers... spaceships... toasters etc.
Cve 2021 40444
⭐
158
CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit
Apk Utilities
⭐
145
🛠 Tools and scripts to manipulate Android APKs
No Sandbox
⭐
137
No Sandbox - Applications That Run Chromium and Chrome Without The Sandbox. TL;DR exploits in these browser based applications are already sandboxed escaped: https://no-sandbox.io/
Cve_2019_0708_bluekeep_rce
⭐
121
bluekeep exploit
Vailyn
⭐
109
A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python
Tp5 Getshell
⭐
105
thinkphp5 rce getshell
Spring Boot Upload File Lead To Rce Tricks
⭐
104
spring boot Fat Jar 应用文件上传漏洞到 RCE 的利用技巧
Revsuit
⭐
103
RevSuit is a flexible and powerful reverse connection platform designed for receiving connection from target host in penetration.
Cve 2020 2883
⭐
102
Weblogic coherence.jar RCE
Cazador_unr
⭐
102
Hacking tools
Cve 2019 0708 Tool
⭐
89
A social experiment
Secexample
⭐
73
JAVA 漏洞靶场 (Vulnerability Environment For Java)
Cve 2019 7609
⭐
68
exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts
Sa Mp Plus
⭐
54
A client modification for GTA:San Andreas that uses SA-MP's plugin SDK to interact with the SA-MP server and add new features
Filegps
⭐
54
A tool that help you to guess how your shell was renamed after the server-side script of the file uploader saved it
Umbraco Rce
⭐
54
Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution
Bane
⭐
53
Osce
⭐
52
Some exploits, which I’ve created during my OSCE preparation.
Exploit Cve 2015 3306
⭐
50
ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container
Ciscoexploit
⭐
47
Cisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)
Zimbraexploit
⭐
46
Zimbra邮件系统漏洞 XXE/RCE/SSRF/Upload GetShell Exploit 1. (CVE-2019-9621 Zimbra<8.8.11 XXE GetShell Exploit)
Exploit Development
⭐
44
Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)
Exploits
⭐
41
Some personal exploits/pocs
Cve 2020 0796 Rce Poc
⭐
40
CVE-2020-0796 Remote Code Execution POC
Sap_vulnerabilities
⭐
40
DoS PoC's for SAP products
Cve 2018 18852
⭐
40
CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.
Mycroftai Rce
⭐
39
"Zero Click" Remote Code Execution in Mycroft AI vocal assistant
Solrexp
⭐
35
Apache Solr <=8.2.0 Velocity Template 0day Exploit
Nodejs Red Team Cheat Sheet
⭐
34
NodeJS Red-Team Cheat Sheet
Exploit Cve 2016 9920
⭐
34
Roundcube 1.0.0 <= 1.2.2 Remote Code Execution exploit and vulnerable container
Printnightmare Cve 2021 34527
⭐
31
PrintNightmare - Windows Print Spooler RCE/LPE Vulnerability (CVE-2021-34527, CVE-2021-1675) proof of concept exploits
Rce
⭐
31
Distributed, workflow-driven integration environment
Domainker
⭐
31
BugBounty Tool
Wd Rce
⭐
31
WD My Cloud PoC exploit
Ecshop Getshell
⭐
24
ecshop rce getshell
Cve 2019 7609
⭐
22
RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer
Exploit Cve 2015 1427
⭐
22
Elasticsearch 1.4.0 < 1.4.2 Remote Code Execution exploit and vulnerable container
Pwnx.py
⭐
21
🏴☠️ Pwn misconfigured sites running ShareX custom image uploader API
Crascan
⭐
20
Crascan is a simple LFI, RFI, RCE, and Joomla Components vulnerability scanner.
Rce Python Oneliner Payload
⭐
20
Python bind shell single line code for both Unix and Windows, used to find and exploit RCE (ImageMagick, Ghostscript, ...)
Prtg Network Monitor Rce
⭐
17
Remote code execution prtg network monitor cve2018-9276
Payloadsall
⭐
17
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Vbulletin5 Rce
⭐
17
CVE-2019-16759 vbulletin 5.0.0 till 5.5.4 pre-auth rce
Exprolog
⭐
16
ProxyLogon Full Exploit Chain PoC (CVE-2021–26855, CVE-2021–26857, CVE-2021–26858, CVE-2021–27065)
Cve 2018 19276
⭐
16
CVE-2018-19276 - OpenMRS Insecure Object Deserialization RCE
Agentgo
⭐
15
Hi! Agentgo is a tool for making remote command executions from server to client with golang, protocol buffers (protobuf) and grpc.
Cve 2020 16899
⭐
15
CVE-2020-16899 - Microsoft Windows TCP/IP Vulnerability Detection Logic and Rule
Edgedressing
⭐
14
edgedressing leverages a Windows "feature" in order to force a target's Edge browser to open. This browser is then directed to a URL of choice.
Cve 2020 7931
⭐
14
Hacking Artifactory with server side template injection
Cve 2019 5624
⭐
12
A proof of concept for Metasploit's CVE-2019-5624 vulnerability (Rubyzip insecure ZIP handling RCE)
Jbossexploit
⭐
12
MSF moudle jboss invoke deploy getshell Exploit & Jboss jmx-console getshell exploit
Cod Steamauth Rce
⭐
11
Cve 2018 16341
⭐
11
CVE-2018-16341 - Nuxeo Remote Code Execution without authentication using Server Side Template Injection
Bhr_labs
⭐
11
Black Hat Ruby book | Lab files | Buy the book https://www.amazon.com/dp/B08JHSF6GT
Advanced Sql Injection Scanner
⭐
11
Ivan Ricart Borges - Test for didactic purposes of web pages vulnerables to SQL injection using dbo database user with xp_cmdshell execution permissions. Using patterns from Internet search engines to extract potentially vulnerable web addresses and test them by changing the GET parameters using invalid Transact-SQL conversion function to cause through unhandled errors by IIS web server to show critical information. If certain features are given and using advanced injection techniques a malicious attacker could gain control of the entire system by executing shell commands in the SQL database engine.
About Attack
⭐
10
一个旨在通过应用场景 / 标签对 Github 红队向工具 / 资源进行分类收集，降低红队技术门槛的手册【持续更新】
Slanger Rce
⭐
10
RCE in Slanger using deserialization of Ruby objects
Php Web Shell
⭐
10
A Simple PHP Web Shell used for Remote Code Execution.
Weblogic_java_des
⭐
9
weblogic T3 collections java InvokerTransformer Transformer InvokerTransformer weblogic.jndi.WLInitialContextFactory
Headpage
⭐
9
A (purpousely) vulnerable, social-media-like, django web application
Python Deserialization Attack Payload Generator
⭐
8
Peas create serialized payload for deserialization RCE attack on python driven applications where pickle ,pyYAML, ruamel.yaml or jsonpickle module is used for deserialization of serialized data. I will update it with more attack vectors to targets other modules.
Thc_blueborne
⭐
8
Projet long TLS-SEC pour la réalisation d'un challenge "tuto" lors de la Toulouse Hacking Convention. Exploitation de la faille Blueborne.
Cve 2019 9978
⭐
8
CVE-2019-9978 - RCE on a Wordpress plugin: Social Warfare < 3.5.3
Zimbra Rce
⭐
8
Zimbra RCE PoC - CVE-2019-9670 XXE/SSRF
Mypayloads
⭐
8
Just a useless set of payload created by me. Saved here for remembrance.
F5 Bigip Rce Cve 2020 5902
⭐
8
F5 BIG-IP RCE CVE-2020-5902 automatic check tool
Cve 2018 15961
⭐
8
Unrestricted file upload in Adobe ColdFusion
Shiro Check Rce
⭐
7
shiro反序列化漏洞检测RCE工具
Pointblank Modtools
⭐
7
Point Blank modification tools
Huawei_hg255s_exploit
⭐
7
🚀 Server Directory Traversal at Huawei HG255s ☄️ - CVE-2017-17309 🚀
Php 8.1.0 Dev Backdoor Rce
⭐
7
PHP 8.1.0-dev Backdoor System Shell Script
Vulnexipy
⭐
7
Vulnerabilities exploitation examples, python
1-100 of 166 projects
Next >
Related Projects
Exploit Rce Projects (73)
Python Rce Projects (70)
Python Exploit Rce Projects (36)
Advertising
📦 9
All Projects
Application Programming Interfaces
📦 120
Applications
📦 181
Artificial Intelligence
📦 72
Blockchain
📦 70
Build Tools
📦 111
Cloud Computing
📦 79
Code Quality
📦 28
Collaboration
📦 30
Command Line Interface
📦 48
Community
📦 81
Companies
📦 60
Compilers
📦 60
Computer Science
📦 74
Configuration Management
📦 39
Content Management
📦 167
Control Flow
📦 197
Data Formats
📦 77
Data Processing
📦 266
Data Storage
📦 132
Economics
📦 60
Frameworks
📦 198
Games
📦 122
Graphics
📦 103
Hardware
📦 148
Integrated Development Environments
📦 47
Learning Resources
📦 147
Legal
📦 28
Libraries
📦 119
Lists Of Projects
📦 21
Machine Learning
📦 336
Mapping
📦 61
Marketing
📦 15
Mathematics
📦 55
Media
📦 228
Messaging
📦 97
Networking
📦 304
Operating Systems
📦 84
Operations
📦 120
Package Managers
📦 52
Programming Languages
📦 229
Runtime Environments
📦 96
Science
📦 42
Security
📦 375
Social Media
📦 26
Software Architecture
📦 70
Software Development
📦 68
Software Performance
📦 57
Software Quality
📦 127
Text Editors
📦 45
Text Processing
📦 131
User Interface
📦 310
User Interface Components
📦 465
Version Control
📦 29
Virtualization
📦 68
Web Browsers
📦 38
Web Servers
📦 25
Web User Interface
📦 194
"GitHub" is a registered trademark of GitHub, Inc. Awesome Open Source is not affiliated with GitHub.
