GitHub topics: remote-code-execution

Repositories

BackdoorAli/user-agent-rce

Educational RCE demo using User-Agent injection.

Language: Python - Size: 5.86 KB - Last synced at: about 14 hours ago - Pushed at: about 15 hours ago - Stars: 1 - Forks: 0

This repository, "user-agent-rce," showcases how insecure handling of the `User-Agent` header can lead to Remote Command Execution. It features a vulnerable PHP server, a secure version, and a Python exploit tool to illustrate the risks and mitigation strategies. 🐱💻✨

Language: Python - Size: 5.86 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 0 - Forks: 1

cboss43/CVE-2024-25600

Unauthenticated RCE exploit for CVE-2024-25600 in WordPress Bricks Builder <= 1.9.6. Executes arbitrary code remotely.

Language: Python - Size: 15.6 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 20 - Forks: 18

0xsyr0/Havoc-C2-SSRF-RCE-Exploit

Merged exploit to abuse SSRF for delivering RCE through websockets.

Language: Python - Size: 12.7 KB - Last synced at: 3 days ago - Pushed at: 4 days ago - Stars: 0 - Forks: 0

mystic-poop/Disware

An discord bot that gives acces to another pc for educational purposes

Language: Python - Size: 10.7 KB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 1 - Forks: 0

AlaBouali/bane

The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..

Language: Python - Size: 1.6 MB - Last synced at: 8 days ago - Pushed at: 9 days ago - Stars: 335 - Forks: 63

ToolKitHub/rce-engine

HTTP API for running untrusted code inside isolated Docker containers

Language: Rust - Size: 233 KB - Last synced at: 17 days ago - Pushed at: 17 days ago - Stars: 3 - Forks: 1

hansmach1ne/LFImap

Local File Inclusion discovery and exploitation tool

Language: Python - Size: 517 KB - Last synced at: 18 days ago - Pushed at: 5 months ago - Stars: 309 - Forks: 39

flast101/flast101.github.io

My Infosec Blog - Stay curious !

Size: 2.12 MB - Last synced at: 14 days ago - Pushed at: about 3 years ago - Stars: 1 - Forks: 0

Dliv3/redis-rogue-server

Redis 4.x/5.x RCE

Language: Python - Size: 24.4 KB - Last synced at: 15 days ago - Pushed at: over 4 years ago - Stars: 543 - Forks: 149

mbadanoiu/Log4Jolokia

Python3 implementation for exploiting Log4J over Jolokia

Language: Python - Size: 85.9 KB - Last synced at: 12 days ago - Pushed at: about 2 months ago - Stars: 2 - Forks: 0

IronLockerRs/IronLocker-Ransomware

STRONGEST RAAS EVER

Language: C++ - Size: 6.84 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 1 - Forks: 1

manuelz120/CVE-2022-23940

PoC for CVE-2022-23940

Language: Python - Size: 154 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 11 - Forks: 6

W2Inc/NXTPeer

Send code. Wait a bit. Get response!

Language: TypeScript - Size: 250 KB - Last synced at: about 17 hours ago - Pushed at: about 1 year ago - Stars: 4 - Forks: 0

so1icitx/CVE-2024-25600

Unauthenticated RCE exploit for CVE-2024-25600 in WordPress Bricks Builder <= 1.9.6. Executes arbitrary code remotely.

Language: Python - Size: 23.4 KB - Last synced at: 3 days ago - Pushed at: 2 months ago - Stars: 10 - Forks: 5

Suiiiaeri/IronLocker-Ransomware

STRONGEST RAAS EVER

Language: C++ - Size: 6.84 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 1 - Forks: 0

Repello-AI/mcp-exploit-demo

This repository demonstrates a security vulnerability in MCP (Model Context Protocol ) servers that allows for remote code execution and data exfiltration through tool poisoning.

Language: Python - Size: 18.6 KB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 2 - Forks: 0

mbadanoiu/MAL-009

MAL-009: Insecure Chaining of Flags T and TT in Zip for Linux

Language: Python - Size: 301 KB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 0 - Forks: 0

Chocapikk/CVE-2023-5360

Exploit for the unauthenticated file upload vulnerability in WordPress's Royal Elementor Addons and Templates plugin (< 1.3.79). CVE-ID: CVE-2023-5360.

Language: Python - Size: 6.84 KB - Last synced at: about 2 months ago - Pushed at: over 1 year ago - Stars: 9 - Forks: 5

mschwager/0wned

Code execution via Python package installation.

Language: Python - Size: 21.5 KB - Last synced at: about 2 months ago - Pushed at: over 6 years ago - Stars: 170 - Forks: 35

so1icitx/CVE-2019-9053

Unauthenticated SQL injection exploit for CVE-2019-9053 in CMS Made Simple <= 2.2.9. Extracts admin creds with time-based SQLi.

Language: Python - Size: 19.5 KB - Last synced at: 3 days ago - Pushed at: 2 months ago - Stars: 0 - Forks: 0

flast101/php-8.1.0-dev-backdoor-rce

PHP 8.1.0-dev Backdoor System Shell Script

Language: Python - Size: 1.69 MB - Last synced at: 14 days ago - Pushed at: about 4 years ago - Stars: 91 - Forks: 22

Sayan690/HTTPSBackdoor

SSL Encrypted covert C2 BackDoor using HTTPS protocol and self-signed certificates.

Language: Python - Size: 11.7 KB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 0 - Forks: 0

AabyssZG/Chrome-RCE-Poc

Chrome-RCE-Poc

Language: HTML - Size: 75.2 KB - Last synced at: about 2 months ago - Pushed at: 10 months ago - Stars: 80 - Forks: 14

MuhammadWaseem29/CVE-2025-24016

CVE-2025-24016: RCE in Wazuh server! Remote Code Execution

Size: 293 KB - Last synced at: 2 months ago - Pushed at: 4 months ago - Stars: 31 - Forks: 5

kw-soft/QuicC2Py

QuicC2Py is an advanced, modular proof-of-concept implementation of a Command-and-Control (C2) system over UDP

Language: Python - Size: 13.7 KB - Last synced at: about 2 months ago - Pushed at: 3 months ago - Stars: 1 - Forks: 0

ogayanfe/websandbox

An online frontend programming sandbox with integrated browser with live reloading built using react, react-dom, django and the webcontainer api

Language: TypeScript - Size: 768 KB - Last synced at: about 2 months ago - Pushed at: 7 months ago - Stars: 10 - Forks: 2

square/rce-agent

gRPC-based Remote Command Execution Agent

Language: Go - Size: 5.22 MB - Last synced at: 2 months ago - Pushed at: 3 months ago - Stars: 141 - Forks: 42

shelld3v/wsshell

WebSocket shell

Language: Python - Size: 5.86 KB - Last synced at: 6 days ago - Pushed at: over 4 years ago - Stars: 14 - Forks: 3

klezVirus/CVE-2021-40444

CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit

Language: HTML - Size: 999 KB - Last synced at: 3 months ago - Pushed at: over 1 year ago - Stars: 806 - Forks: 171

waived/CVE-2024-4577-PHP-RCE

Automated PHP remote code execution scanner for CVE-2024-4577

Language: Python - Size: 14.6 KB - Last synced at: 2 months ago - Pushed at: 9 months ago - Stars: 5 - Forks: 1

noraj/Umbraco-RCE

Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution

Language: Python - Size: 17.6 KB - Last synced at: about 2 months ago - Pushed at: over 4 years ago - Stars: 75 - Forks: 40

mbadanoiu/CVE-2022-41678

CVE-2022-41678: Dangerous MBeans Accessible via Jolokia API in Apache ActiveMQ

Size: 1.55 MB - Last synced at: 3 months ago - Pushed at: 6 months ago - Stars: 3 - Forks: 0

Rishabh-malhotraa/caucus

Realtime Collaborate Editor with Embedded Compiler

Language: TypeScript - Size: 5.28 MB - Last synced at: about 2 months ago - Pushed at: about 1 year ago - Stars: 303 - Forks: 70

Narasimha1997/py4jshell

Simulating Log4j Remote Code Execution (RCE) vulnerability in a flask web server using python's logging library with custom formatter that simulates lookup substitution by executing remote exploit code.

Language: Python - Size: 16.6 KB - Last synced at: 5 days ago - Pushed at: over 3 years ago - Stars: 87 - Forks: 8

michaelliao/remote-code-runner 📦

A remote code running service.

Language: Python - Size: 19.5 KB - Last synced at: about 1 month ago - Pushed at: about 4 years ago - Stars: 134 - Forks: 29

mbadanoiu/CVE-2024-22274

CVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server

Size: 1010 KB - Last synced at: 3 months ago - Pushed at: 11 months ago - Stars: 38 - Forks: 10

paulonteri/remote-code-execution-environment

Have you ever wondered how code execution on competitive programming websites like leetcode works? Code that runs code. Tried implementing that.

Language: JavaScript - Size: 376 KB - Last synced at: 2 months ago - Pushed at: over 2 years ago - Stars: 154 - Forks: 40

Jonoans/Umbraco-RCE

Umbraco CMS 7.12.4 - (Authenticated) Remote Code Execution

Language: Python - Size: 18.6 KB - Last synced at: about 2 months ago - Pushed at: almost 2 years ago - Stars: 16 - Forks: 3

noraj/fuelcms-rce

Fuel CMS 1.4 - Remote Code Execution

Language: Ruby - Size: 5.86 KB - Last synced at: about 2 months ago - Pushed at: over 3 years ago - Stars: 7 - Forks: 3

orangmuda/CVE-2021-41773

Apache HTTPd (2.4.49) – Local File Disclosure (LFI)

Language: Dockerfile - Size: 7.81 KB - Last synced at: 5 days ago - Pushed at: over 3 years ago - Stars: 3 - Forks: 2

emirhannyvz/Antistealer

https://github.com/emirhannyvz/Antistealer/releases

Language: Python - Size: 36.1 KB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 9 - Forks: 0

dragonked2/Egyscan

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:

Language: Python - Size: 212 KB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 250 - Forks: 46

Warxim/CVE-2022-41852

CVE-2022-41852 Proof of Concept (unofficial)

Language: Java - Size: 12.7 KB - Last synced at: 3 months ago - Pushed at: over 2 years ago - Stars: 75 - Forks: 16

AyeshaAshfaq12/Vulnerability_Scanner

The Vulnerability Scanner is a Django-based application that scans websites for security vulnerabilities, providing insights into potential weaknesses such as SQL Injection, XSS, and CSRF issues. Users receive a detailed analysis and site safety score, helping them enhance their web security posture.

Language: Python - Size: 136 KB - Last synced at: 3 months ago - Pushed at: 7 months ago - Stars: 1 - Forks: 0

mauricelambert/Shell-Exploit-Umbraco

This module implements a shell to exploit a RCE in umbraco CMS.

Language: Python - Size: 63.5 KB - Last synced at: 3 months ago - Pushed at: over 1 year ago - Stars: 2 - Forks: 1

mbadanoiu/CVE-2023-34468

CVE-2023-34468: Remote Code Execution via DB Components in Apache NiFi

Size: 1.38 MB - Last synced at: 3 months ago - Pushed at: over 1 year ago - Stars: 5 - Forks: 0

vandavey/DotnetCat

Remote command shell application written in C# targeting the .NET 9.0 runtime.

Language: C# - Size: 1.27 GB - Last synced at: 5 months ago - Pushed at: 5 months ago - Stars: 30 - Forks: 6

twseptian/cve-2022-24112

Apache APISIX < 2.12.1 Remote Code Execution and Docker Lab

Language: Dockerfile - Size: 51.8 KB - Last synced at: 4 months ago - Pushed at: about 3 years ago - Stars: 9 - Forks: 11

ToolKitHub/rce-images

Language-specific Docker images for remote code execution.

Language: Nix - Size: 11 MB - Last synced at: 14 days ago - Pushed at: 14 days ago - Stars: 0 - Forks: 0

Jenderal92/RCE-Exploit-Framework

This framework is designed to assist penetration testers or developers in understanding the mechanics of remote code execution (RCE) exploitation.

Language: Python - Size: 6.84 KB - Last synced at: 3 months ago - Pushed at: 6 months ago - Stars: 1 - Forks: 0

0vercl0k/CVE-2019-11708 📦

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

Language: JavaScript - Size: 11.3 MB - Last synced at: 7 months ago - Pushed at: almost 5 years ago - Stars: 620 - Forks: 81

orangmuda/CVE-2021-21972

CVE-2021-21972 – ᴠᴍᴡᴀʀᴇ ᴄʟɪᴇɴᴛ ᴜɴᴀᴜᴛʜᴏʀɪᴢᴇᴅ ᴄᴏᴅᴇ ɪɴᴊᴇᴄᴛɪᴏɴ (ʀᴄᴇ)

Size: 19.5 KB - Last synced at: 5 days ago - Pushed at: over 3 years ago - Stars: 10 - Forks: 4

amitanshusahu/node-containerized-execution-env

LeetCode backend, scaleble nodjs backend which runs user submitted code in a containerized code execution envroment, implementaion of RabbitMq RPC, devops assignment of @hkirat

Language: JavaScript - Size: 1.65 MB - Last synced at: about 2 months ago - Pushed at: about 2 years ago - Stars: 18 - Forks: 6

0vercl0k/CVE-2019-9810 📦

Exploit for CVE-2019-9810 Firefox on Windows 64-bit.

Language: JavaScript - Size: 7.93 MB - Last synced at: 7 months ago - Pushed at: over 5 years ago - Stars: 227 - Forks: 58

jamf/CVE-2020-0796-RCE-POC 📦

CVE-2020-0796 Remote Code Execution POC

Language: Python - Size: 2.34 MB - Last synced at: 7 months ago - Pushed at: almost 5 years ago - Stars: 534 - Forks: 169

mfazrinizar/T-XPLOITER

T-XPLOITER is a Perl program for detect and (even) exploit website(s). Why the name is T-XPLOITER ? T means Triple, XPLOITER means Exploiter. This program has 3 features and functions to detect and (even) exploit website(s), just check it out :).

Language: Perl - Size: 29.3 KB - Last synced at: about 1 month ago - Pushed at: over 6 years ago - Stars: 14 - Forks: 2

runabol/code-execution-demo

A demo of a remote code execution engine using Tork

Language: TypeScript - Size: 299 KB - Last synced at: about 2 months ago - Pushed at: over 1 year ago - Stars: 9 - Forks: 1

gunzf0x/Grav-CMS-RCE-Authenticated

Exploit against Grav CMS (versions below 1.7.45) that allows Remote Code Execution for an authenticated user.

Language: Python - Size: 10.7 KB - Last synced at: 9 months ago - Pushed at: 9 months ago - Stars: 0 - Forks: 0

renatoalencar/dlink-dir610-exploits

Exploits for CVE-2020-9376 and CVE-2020-9377

Language: Python - Size: 0 Bytes - Last synced at: about 2 months ago - Pushed at: almost 5 years ago - Stars: 4 - Forks: 1

pjobsina/RiteCMS-2.0-Exploit-RCE

A Remote Code Execution python script to exploit RiteCMS 2.0

Language: Python - Size: 554 KB - Last synced at: 3 months ago - Pushed at: 9 months ago - Stars: 1 - Forks: 0

NaheedRayan/code-execution-engine

An API which executes codes in a sandbox environment 🙀🤯.

Language: JavaScript - Size: 2 MB - Last synced at: 10 months ago - Pushed at: 10 months ago - Stars: 6 - Forks: 2

K3ysTr0K3R/CVE-2024-25600-EXPLOIT

A PoC exploit for CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution (RCE)

Language: Python - Size: 5.86 KB - Last synced at: 10 months ago - Pushed at: over 1 year ago - Stars: 18 - Forks: 4

mbadanoiu/CVE-2023-49964

CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco

Size: 725 KB - Last synced at: 3 months ago - Pushed at: over 1 year ago - Stars: 5 - Forks: 4

Traumatism/raycharles

Blind RCE fuzzer

Language: Python - Size: 4.5 MB - Last synced at: 3 months ago - Pushed at: almost 2 years ago - Stars: 16 - Forks: 3

scheatkode/presshell Fork of leonjza/wordpress-shell

🚪 Quick & dirty Wordpress Command Execution Shell

Language: PHP - Size: 104 KB - Last synced at: 7 months ago - Pushed at: over 3 years ago - Stars: 66 - Forks: 9

orangmuda/CVE-2019-15858

Unauthenticated Remote Code Execution at Woody Ad Snippets (PoC)

Language: JavaScript - Size: 8.79 KB - Last synced at: 5 days ago - Pushed at: over 3 years ago - Stars: 3 - Forks: 1

orangmuda/CVE-2021-40870

Aviatrix allows an authenticated user to execute arbitrary code

Language: Python - Size: 1.95 KB - Last synced at: 5 days ago - Pushed at: over 3 years ago - Stars: 3 - Forks: 3

orangmuda/CVE-2021-27651

bypass all stages of the password reset flow

Size: 2.93 KB - Last synced at: 5 days ago - Pushed at: over 3 years ago - Stars: 1 - Forks: 1

x0root/CVE-2020-13945-EXPLOIT

PoC exploit for CVE-2020-13945 - Apache APISIX Remote Code Execution (RCE)

Language: Python - Size: 11.7 KB - Last synced at: 9 months ago - Pushed at: 10 months ago - Stars: 0 - Forks: 0

K3ysTr0K3R/CVE-2020-13945-EXPLOIT

A PoC exploit for CVE-2020-13945 - Apache APISIX Remote Code Execution (RCE)

Language: Python - Size: 9.77 KB - Last synced at: 11 months ago - Pushed at: 11 months ago - Stars: 0 - Forks: 0

SKHTW/REXEC-Hunt

REXEC-Hunt is an initial Bash script for identifying web app vulnerabilities leading to remote code execution. A foundational tool to automate detection, REXEC-Hunt is a stepping stone towards a comprehensive scanner. Clone, run, and probe URLs safely.

Language: Shell - Size: 6.84 KB - Last synced at: 11 months ago - Pushed at: 11 months ago - Stars: 0 - Forks: 0

UNICORDev/exploit-CVE-2020-5844

Exploit for CVE-2020-5844 (Pandora FMS v7.0NG.742) - Remote Code Execution

Language: Python - Size: 67.4 KB - Last synced at: 21 days ago - Pushed at: over 1 year ago - Stars: 8 - Forks: 1

Rahul-Baradol/remote-code-executor

A micro-service based online judge, where users can solve coding problems primarily focused on algorithms and data structures.

Size: 3.91 KB - Last synced at: 11 months ago - Pushed at: 11 months ago - Stars: 0 - Forks: 0

RektInator/cod-steamauth-rce

Language: C++ - Size: 1.56 MB - Last synced at: 10 months ago - Pushed at: over 5 years ago - Stars: 32 - Forks: 2

Mahboob-A/Algocode

Algocode, coding context and practice platform, is a Django based microservices architecture backend for online judge platforms just like Leetcode.

Size: 163 KB - Last synced at: 12 months ago - Pushed at: 12 months ago - Stars: 0 - Forks: 0

Cappricio-Securities/CVE-2017-7269

Windows Server 2003 & IIS 6.0 - Remote Code Execution

Language: Python - Size: 14.6 KB - Last synced at: about 1 month ago - Pushed at: 12 months ago - Stars: 0 - Forks: 0

mbadanoiu/CVE-2021-46364

CVE-2021-46364: YAML Deserialization in Magnolia CMS

Size: 363 KB - Last synced at: 3 months ago - Pushed at: over 1 year ago - Stars: 1 - Forks: 0

nikhil25803/code-judge

An online code judge platform (like leetcode). Remote code execution in a docker container invoked by Lambda function.

Language: TypeScript - Size: 63.5 KB - Last synced at: about 12 hours ago - Pushed at: 12 months ago - Stars: 1 - Forks: 0

Fadavvi/CVE-2018-17431-PoC 📦

Proof of consept for CVE-2018-17431

Language: Python - Size: 558 KB - Last synced at: 3 months ago - Pushed at: almost 4 years ago - Stars: 2 - Forks: 3

Related Keywords

remote-code-execution 174 rce 61 exploit 47 poc 28 cve 26 python 26 python3 23 vulnerability 22 0-day 21 proof-of-concept 20 hacking 19 docker 16 cves 16 exploitation 16 authenticated 16 security 15 rce-exploit 14 bypass 11 command-injection 11 server-side-template-injection 9 remote-code-execution-engine 7 penetration-testing 7 exploits 7 wordpress 6 rce-scanner 6 typescript 6 sql-injection 6 pentesting 6 shell 6 remote-code-execution-rce 5 unauthenticated 5 pentest 5 log4j 5 vulnerability-detection 4 linux 4 code-injection 4 cybersecurity 4 vulnerability-scanners 4 react 4 hackthebox 4 leetcode 4 security-research 4 apache 4 php 4 online-judge 4 ssrf 4 nodejs 4 deserialization 4 umbraco-cms 3 log4shell 3 trojan 3 word 3 security-tools 3 cross-site-scripting 3 javascript 3 injection 3 web-exploitation 3 scanner 3 vulnerabilities 3 bash 3 code 3 apache-apisix 3 wordpress-plugin 3 reverse-shell 3 remote-access 3 http 3 user-agent 3 malware 3 code-execution 2 cve-2024-4577 2 dsa 2 cve-2021-40444 2 webshell 2 bind-shell 2 backdoor 2 remote-execution 2 buffer-overflow 2 rce-agent 2 exploit-development 2 web-application-security 2 privilege-escalation 2 c2 2 ctf 2 cve-2021-44228 2 code-editor 2 command-and-control 2 security-researcher 2 https-server 2 file-upload 2 django 2 payload 2 devices 2 cve-2020-12641 2 nodejs-server 2 msdt 2 firefox 2 api 2 cve-2019-9810 2 follina 2 sandbox 2