remote-code-execution

Redis 4.x/5.x RCE

CVE-2020-0796 Remote Code Execution POC

The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..

Local File Inclusion discovery and exploitation tool

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:

Code execution via Python package installation.

A remote code running service.

PHP 8.1.0-dev Backdoor System Shell Script

Simulating Log4j Remote Code Execution (RCE) vulnerability in a flask web server using python's logging library with custom formatter that simulates lookup substitution by executing remote exploit code.

Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.

Laravel RCE Exploitation Toolkit

Juniper Firewalls CVE-2023-36845 - RCE

CVE-2025-24016: Wazuh Unsafe Deserialization Remote Code Execution (RCE)

Connect Box CH7465LG (CVE-2019-13025)

Exploit Microsoft Zero-Day Vulnerability Follina (CVE-2022-30190)

Vulnerability analysis and PoC for the Apache Tomcat - CGIServlet enableCmdLineArguments Remote Code Execution (RCE)

Atlassian Confluence (CVE-2022-26134) - Unauthenticated Remote code execution (RCE)

This repository demonstrates a security vulnerability in MCP (Model Context Protocol ) servers that allows for remote code execution and data exfiltration through tool poisoning.

Test a URL or captured HTTP request for RCE—and know what the evidence actually proves. RCEKit checks command injection, SSTI and blind paths, separates confirmed execution from uncertain signals and untested runs, and generates targeted payloads for Burp, ffuf and Nuclei. One Python file; no third-party dependencies.