Awesome Open Source

Programming Languages

Search results for python rce

200 search results found

Vulmap ⭐ 2,935

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

Hackerone Reports ⭐ 2,933

Top disclosed reports from HackerOne

Ssrfmap ⭐ 2,306

Automatic SSRF fuzzer and exploitation tool

Gopherus ⭐ 2,228

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

Pwn_jenkins ⭐ 1,693

Notes about attacking Jenkins servers

Poc Bomber ⭐ 1,604

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

Exploits ⭐ 1,484

Miscellaneous exploit code

Jexboss ⭐ 1,470

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

Blackwidow ⭐ 1,448

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

V3n0m Scanner ⭐ 1,342

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

Waf Bypass ⭐ 970

Check your WAF before an attacker does

Sec_profile ⭐ 885

爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势

Smbghost_rce_poc ⭐ 818

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

Redis Rce ⭐ 671

Redis 4.x/5.x RCE

Vulnerability List ⭐ 657

在渗透测试中快速检测常见中间件、组件的高危漏洞。

Cve 2017 0199 ⭐ 622

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other payload to victim without any complex configuration.

Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.

Sstimap ⭐ 546

Automatic SSTI detection tool with interactive interface

for mass exploiting

Aem Hacker ⭐ 460

Kraken, a modular multi-language webshell coded by @secu_x11

Awesome Jenkins Rce 2019 ⭐ 430

There is no pre-auth RCE in Jenkins since May 2017, but this is the one!

Covertutils ⭐ 412

A framework for Backdoor development!

Penelope ⭐ 377

Penelope Shell Handler

Cve 2017 12617 ⭐ 342

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

Some_pocsuite ⭐ 311

用于漏洞排查的pocsuite3验证POC代码

Spring4shell Poc ⭐ 301

Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965

Homework Of Python ⭐ 253

Python codes of my blog.

Cisco Snmp Rce ⭐ 224

Cisco IOS SNMP RCE PoC

Damnwebscanner ⭐ 213

Another web vulnerabilities scanner, this extension works on Chrome and Opera

Poc Exp ⭐ 204

常用渗透poc收集

Cve 2019 0192 ⭐ 200

RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl

Redis Rogue Server ⭐ 199

Redis 4.x/5.x RCE

Cve 2020 2551 ⭐ 195

how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP

Log4jpwn ⭐ 189

log4j rce test environment and poc

Ciscorv320dump ⭐ 188

CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!

Cve 2019 1040 ⭐ 184

CVE-2019-1040 with Exchange

Php Code Audit ⭐ 167

php code audit for cms vulnerabilities / 代码审计，对一些大型cms漏洞的复现研究，更新源码和漏洞exp

Cisco Rce ⭐ 166

CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC

Python Log4rce ⭐ 160

An All-In-One Pure Python PoC for CVE-2021-44228

Egyscan ⭐ 157

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:

Secimport ⭐ 153

eBPF Python runtime sandbox with seccomp (Blocks RCE).

Acunetix_0day ⭐ 141

Acunetix 0day RCE

Exploit Framework ⭐ 139

🔥 An Exploit framework for Web Vulnerabilities written in Python

Scriptsandexploits ⭐ 137

Some scripts and exploits

Published security vulnerabilities, research, and associated information.

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Cve 2019 11539 ⭐ 125

Exploit for the Post-Auth RCE vulnerability in Pulse Secure Connect

Ultrarelay ⭐ 119

poison and relay NTLM credentials

Tp5 Getshell ⭐ 105

thinkphp5 rce getshell

Security ⭐ 105

General Security Scripts

POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞，对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC

Log4jcheck ⭐ 95

A script that checks for vulnerable Log4j (CVE-2021-44228) systems using injection of the payload in common HTTP headers.

Sap_gw_rce_exploit ⭐ 94

SAP Gateway RCE exploits

Exprolog ⭐ 88

ProxyLogon Full Exploit Chain PoC (CVE-2021–26855, CVE-2021–26857, CVE-2021–26858, CVE-2021–27065)

A Cloud Robotics Platform

Cve 2019 12409 ⭐ 85

Apache Solr RCE (ENABLE_REMOTE_JMX_OPTS="true")

Poc Cve 2022 30190 ⭐ 85

Cve 2020 11651 ⭐ 78

Cve 2022 21907 Http.sys ⭐ 77

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers

Cve 2019 11580 ⭐ 77

CVE-2019-11580 Atlassian Crowd and Crowd Data Center RCE

Cve 2022 36446 Webmin Software Package Updates Rce ⭐ 76

A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997.

Cve 2019 11043 ⭐ 74

php-fpm+Nginx RCE

Satellian Cve 2020 7980 ⭐ 73

PoC script that shows RCE vulnerability over Intellian Satellite controller

Cve 2022 41352 Zimbra Rce ⭐ 72

Zimbra <9.0.0.p27 RCE

Cve 2019 7609 ⭐ 68

exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts

Solr_rce ⭐ 67

Apache Solr RCE via Velocity template

Android712 Blueborne ⭐ 66

Android Blueborne RCE CVE-2017-0781

Springshell ⭐ 65

Spring4Shell - Spring Core RCE - CVE-2022-22965

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

Cve 2019 6340 ⭐ 62

Drupal8's REST RCE, SA-CORE-2019-003, CVE-2019-6340

Ceasiompy ⭐ 57

CEASIOMpy is a Python conceptual aircraft design environment

Grandstream_exploits ⭐ 56

Gogsownz ⭐ 54

A tool that help you to guess how your shell was renamed after the server-side script of the file uploader saved it

Umbraco Rce ⭐ 54

Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution

Kubelet Anon Rce ⭐ 53

Executes commands in a container on a kubelet endpoint that allows anonymous authentication (default)

Pil Rce By Ghostbutt ⭐ 53

Exploiting Python PIL Module Command Execution Vulnerability

Some exploits, which I’ve created during my OSCE preparation.

Disfuzz Afl ⭐ 51

Distributed Fuzzing for afl

Cve 2023 27372 ⭐ 51

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.

Exploit Cve 2015 3306 ⭐ 50

ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container

Cve 2020 11890 ⭐ 50

CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE

Cve 2023 6553 ⭐ 49

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

Cve Repository ⭐ 49

🪲 Repository of CVE found by OCD people

Ciscoexploit ⭐ 47

Cisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)

Cve 2021 41773 ⭐ 47

Apache2 2.4.49 - LFI & RCE Exploit - CVE-2021-41773

Ztexploit ⭐ 46

ZTE ZXV10 H108L Router with <= V1.0.01_WIND_A01 - Remote root RCE Exploit

Repo for proof of concept exploits and tools.

Edgedressing ⭐ 44

edgedressing leverages a Windows "feature" in order to force a target's Edge browser to open. This browser is then directed to a URL of choice.

Discuz Ml Rce ⭐ 42

Sa Core 2018 004 ⭐ 42

SA-CORE-2018-004 POC #drupalgeddon3

Codiad Remote Code Execute Exploit ⭐ 42

A simple exploit to execute system command on codiad

Cve 2018 18852 ⭐ 40

CERIO RCE CVE-2018-18852, authenticated (vendor defaults) web-based RCE as root user.

Cve 2020 0796 Rce Poc ⭐ 40

CVE-2020-0796 Remote Code Execution POC

Smbghost ⭐ 40

Scanner for CVE-2020-0796 - A SMBv3.1.1 + SMB compression RCE

Sap_vulnerabilities ⭐ 40

DoS PoC's for SAP products

Cve 2022 45771 Pwndoc Lfi To Rce ⭐ 40

Pwndoc local file inclusion to remote code execution of Node.js code on the server

Related Searches

Python Django (28,897)

Python Machine Learning (20,195)

Python Flask (17,643)

Python Dataset (14,792)

Python Docker (14,113)

Python Tensorflow (13,736)

Python Command Line (13,351)

Python Deep Learning (13,092)

Python Jupyter Notebook (12,976)

Python Network (11,495)

1-100 of 200 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.