Awesome Open Source

Programming Languages

Search results for python rce

136 search results found

Vulmap ⭐ 2,935

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

Hackerone Reports ⭐ 2,933

Top disclosed reports from HackerOne

Ssrfmap ⭐ 2,306

Automatic SSRF fuzzer and exploitation tool

Pwn_jenkins ⭐ 1,693

Notes about attacking Jenkins servers

Poc Bomber ⭐ 1,604

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

Exploits ⭐ 1,484

Miscellaneous exploit code

Jexboss ⭐ 1,470

JexBoss: Jboss (and Java Deserialization Vulnerabilities) verify and EXploitation Tool

Blackwidow ⭐ 1,448

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

V3n0m Scanner ⭐ 1,342

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns

Waf Bypass ⭐ 970

Check your WAF before an attacker does

Smbghost_rce_poc ⭐ 818

Vulnerability List ⭐ 657

在渗透测试中快速检测常见中间件、组件的高危漏洞。

Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.

Sstimap ⭐ 546

Automatic SSTI detection tool with interactive interface

Kraken, a modular multi-language webshell coded by @secu_x11

Cve 2017 12617 ⭐ 342

Apache Tomcat < 9.0.1 (Beta) / < 8.5.23 / < 8.0.47 / < 7.0.8 - JSP Upload Bypass / Remote Code Execution

Some_pocsuite ⭐ 311

用于漏洞排查的pocsuite3验证POC代码

Spring4shell Poc ⭐ 301

Spring4Shell Proof Of Concept/And vulnerable application CVE-2022-22965

Damnwebscanner ⭐ 213

Another web vulnerabilities scanner, this extension works on Chrome and Opera

Poc Exp ⭐ 204

常用渗透poc收集

Cve 2019 0192 ⭐ 200

RCE on Apache Solr using deserialization of untrusted data via jmx.serviceUrl

Cve 2020 2551 ⭐ 195

how detect CVE-2020-2551 poc exploit python Weblogic RCE with IIOP

Log4jpwn ⭐ 189

log4j rce test environment and poc

Ciscorv320dump ⭐ 188

CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!

Php Code Audit ⭐ 167

php code audit for cms vulnerabilities / 代码审计，对一些大型cms漏洞的复现研究，更新源码和漏洞exp

Cisco Rce ⭐ 166

CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC

Egyscan ⭐ 157

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:

Exploit Framework ⭐ 139

🔥 An Exploit framework for Web Vulnerabilities written in Python

Scriptsandexploits ⭐ 137

Some scripts and exploits

Published security vulnerabilities, research, and associated information.

A phased, evasive Path Traversal + LFI scanning & exploitation tool in Python

Cve 2019 11539 ⭐ 125

Exploit for the Post-Auth RCE vulnerability in Pulse Secure Connect

Security ⭐ 105

General Security Scripts

POC-T强化版本 POC-S , 用于红蓝对抗中快速验证Web应用漏洞，对功能进行强化以及脚本进行分类添加，自带dnslog等, 平台补充来自vulhub靶机及其他开源项目的高可用POC

Log4jcheck ⭐ 95

A script that checks for vulnerable Log4j (CVE-2021-44228) systems using injection of the payload in common HTTP headers.

Exprolog ⭐ 88

ProxyLogon Full Exploit Chain PoC (CVE-2021–26855, CVE-2021–26857, CVE-2021–26858, CVE-2021–27065)

A Cloud Robotics Platform

Poc Cve 2022 30190 ⭐ 85

Cve 2022 36446 Webmin Software Package Updates Rce ⭐ 76

A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997.

Cve 2019 11043 ⭐ 74

php-fpm+Nginx RCE

Cve 2022 41352 Zimbra Rce ⭐ 72

Zimbra <9.0.0.p27 RCE

Cve 2019 7609 ⭐ 68

exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts

Multithreaded Plugin based vulnerability scanner for mass detection of web-based applications vulnerabilities

Ceasiompy ⭐ 57

CEASIOMpy is a Python conceptual aircraft design environment

Grandstream_exploits ⭐ 56

Umbraco Rce ⭐ 54

Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution

A tool that help you to guess how your shell was renamed after the server-side script of the file uploader saved it

Pil Rce By Ghostbutt ⭐ 53

Exploiting Python PIL Module Command Execution Vulnerability

Some exploits, which I’ve created during my OSCE preparation.

Cve 2023 27372 ⭐ 51

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.

Exploit Cve 2015 3306 ⭐ 50

ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container

Cve Repository ⭐ 49

🪲 Repository of CVE found by OCD people

Cve 2023 6553 ⭐ 49

Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

Cve 2021 41773 ⭐ 47

Apache2 2.4.49 - LFI & RCE Exploit - CVE-2021-41773

Repo for proof of concept exploits and tools.

Codiad Remote Code Execute Exploit ⭐ 42

A simple exploit to execute system command on codiad

Cve 2022 45771 Pwndoc Lfi To Rce ⭐ 40

Pwndoc local file inclusion to remote code execution of Node.js code on the server

Sap_vulnerabilities ⭐ 40

DoS PoC's for SAP products

Cve 2020 0796 Rce Poc ⭐ 40

CVE-2020-0796 Remote Code Execution POC

Cve 2023 36845 ⭐ 39

Juniper Firewalls CVE-2023-36845 - RCE

Poc Cve 2021 41773 ⭐ 36

S2 053 Cve 2017 12611 ⭐ 36

A simple script for exploit RCE for Struts 2 S2-053(CVE-2017-12611)

Libphpserialize ⭐ 36

implements php-style serialize/unserialize for python 3.7+

Apache Solr <=8.2.0 Velocity Template 0day Exploit

Exploit Cve 2016 9920 ⭐ 34

Roundcube 1.0.0 <= 1.2.2 Remote Code Execution exploit and vulnerable container

WD My Cloud PoC exploit

Domainker ⭐ 31

Apache Solr Rce Via Velocity Template ⭐ 30

My Ctf Challenges ⭐ 28

CTF challenges I created

Cve 2019 15107 ⭐ 26

Cve 2020 5902 ⭐ 26

exploit code for F5-Big-IP (CVE-2020-5902)

Xxl Job Rce ⭐ 25

xxl-job未授权命令执行

Redis Rce ⭐ 24

remote code execute for redis4 and redis5

Ecshop Getshell ⭐ 24

ecshop rce getshell

Cve 2022 35405 ⭐ 23

ManageEngine PAM360, Password Manager Pro, and Access Manager Plus unauthenticated remote code execution vulnerability PoC-exploit

Snmp Shell ⭐ 23

Shell Simulation over Net-SNMP with extend functionality

S2 045 Exp Poc Tools ⭐ 23

S2-045 漏洞 POC-TOOLS CVE-2017-5638

Cve 2022 26134 ⭐ 21

[CVE-2022-26134]Confluence OGNL expression injected RCE with sandbox bypass.

Blackhat Python ⭐ 21

Black Hat Python workshop for Disobey 2019

🏴‍☠️ Pwn misconfigured sites running ShareX custom image uploader API

Sap_eem_cve 2020 6207 ⭐ 19

PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)

Cve 2018 3191 Rce Exploit ⭐ 18

Secreport ⭐ 18

ChatGPT加持的，多人协同信息安全渗透测试报告编写/导出平台

Pulse Gosecure Rce Poc ⭐ 18

Tool to test for existence of CVE-2020-8218

Implementation of a radiative-convective equilibrium model.

Cve 2018 7750 ⭐ 17

an RCE (remote command execution) approach of CVE-2018-7750

Payloadsall ⭐ 17

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Cve 2018 19276 ⭐ 16

CVE-2018-19276 - OpenMRS Insecure Object Deserialization RCE

Vbulletin 5.1.x Preauth Rce ⭐ 16

[Exploit] vBulletin 5.1.x - PreAuth Remote Code Execution

Cve 2022 26134 ⭐ 16

Atlassian Confluence (CVE-2022-26134) - Unauthenticated Remote code execution (RCE)

S2 057 Cve 2018 11776 ⭐ 15

A simple exploit for Apache Struts RCE S2-057 (CVE-2018-11776)

Cve 2020 7931 ⭐ 14

Hacking Artifactory with server side template injection

Hichip P2p Firmware Rce ⭐ 14

Exploit development and reversing of Hichip's P2P camera firmware

S2 052 Reproducing ⭐ 14

Cve 2020 14321 ⭐ 13

Python script to exploit CVE-2020-14321 - Moodle 3.9 - Course enrollments allowed privilege escalation from teacher role into manager role to RCE.

Cve 2022 33891 ⭐ 11

「💥」CVE-2022-33891 - Apache Spark Command Injection

Loophole ⭐ 11

记录搭建漏洞环境及漏洞复现

Cve 2019 0708 ⭐ 11

CVE-2019-0708批量检测

Nagiosxi_rce To Root ⭐ 10

Nagios XI 5.5.6 Remote Code Execution and Privilege Escalation

Related Searches

Python Django (28,897)

Python Machine Learning (20,195)

Python Flask (17,643)

Python Dataset (14,792)

Python Docker (14,113)

Python Tensorflow (13,736)

Python Command Line (13,351)

Python Deep Learning (13,092)

Python Jupyter Notebook (12,976)

Python Network (11,495)

1-100 of 136 search results

Privacy | About | Terms | Follow Us On Twitter

Copyright 2018-2024 Awesome Open Source. All rights reserved.