Topic: "command-injection"
commixproject/commix
Automated All-in-One OS Command Injection Exploitation Tool.
Language: Python - Size: 6.9 MB - Last synced at: 3 days ago - Pushed at: 3 days ago - Stars: 5,272 - Forks: 871

payloadbox/command-injection-payload-list
🎯 Command Injection Payload List
Size: 23.4 KB - Last synced at: 4 days ago - Pushed at: 11 months ago - Stars: 3,309 - Forks: 699

arch3rPro/PentestTools
Awesome Pentest Tools Collection
Size: 17 MB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 1,285 - Forks: 283

hansmach1ne/LFImap
Local File Inclusion discovery and exploitation tool
Language: Python - Size: 517 KB - Last synced at: 10 days ago - Pushed at: 5 months ago - Stars: 309 - Forks: 39

paralax/lfi-labs
small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns
Language: PHP - Size: 29.3 KB - Last synced at: over 1 year ago - Pushed at: over 4 years ago - Stars: 302 - Forks: 81

dragonked2/Egyscan
Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:
Language: Python - Size: 212 KB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 250 - Forks: 46

yuriisanin/CVE-2022-45025
[PoC] Command injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)
Size: 12.4 MB - Last synced at: 10 months ago - Pushed at: over 2 years ago - Stars: 89 - Forks: 20

jackaduma/NLP4CyberSecurity
NLP model and tech for cyber security tasks
Language: Jupyter Notebook - Size: 89.8 MB - Last synced at: about 1 month ago - Pushed at: about 2 years ago - Stars: 87 - Forks: 27

TrixSec/waymap
Waymap is a fast and optimized web vulnerability scanner built for penetration testers. It helps in identifying vulnerabilities by testing against various payloads.
Language: Python - Size: 4.69 MB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 75 - Forks: 6

omurugur/OS_Command_Payload_List
OS Command Injection Vulnerability Payload List
Size: 76.2 KB - Last synced at: about 2 years ago - Pushed at: over 4 years ago - Stars: 33 - Forks: 20

vladan-stojnic/ML-based-WAF
Simple machine learning based web application firewall (WAF) created in python
Language: Jupyter Notebook - Size: 16.8 MB - Last synced at: about 2 years ago - Pushed at: almost 5 years ago - Stars: 27 - Forks: 10

dogancanbakir/metamaska
μετάμάσκα - malevolent payload classifier
Language: Jupyter Notebook - Size: 30.2 MB - Last synced at: 12 days ago - Pushed at: almost 2 years ago - Stars: 24 - Forks: 2

UNICORDev/exploit-CVE-2022-25765
Exploit for CVE-2022–25765 (pdfkit) - Command Injection
Language: Python - Size: 42 KB - Last synced at: 14 days ago - Pushed at: 5 months ago - Stars: 23 - Forks: 3

JackDoan/TP-Link-ArcherC5-RCE
CVE-2018-19537
Language: Python - Size: 36.1 KB - Last synced at: almost 2 years ago - Pushed at: over 6 years ago - Stars: 18 - Forks: 5

ThatNotEasy/CVE-2023-34960
Perform with Massive Command Injection (Chamilo)
Language: Python - Size: 61.5 KB - Last synced at: over 1 year ago - Pushed at: almost 2 years ago - Stars: 16 - Forks: 8

Traumatism/raycharles
Blind RCE fuzzer
Language: Python - Size: 4.5 MB - Last synced at: 3 months ago - Pushed at: almost 2 years ago - Stars: 16 - Forks: 3

gigaryte/cve-2022-31898
Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215
Language: Python - Size: 16.6 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 15 - Forks: 5

abrahim7112/hackers_CVE_2023_poc
The largest hacking program with new tools CVE-2023-PoC for the year 2023 It contains all the attack and exploitation tools for testing websites, as well as a graphical interface to facilitate its use for beginners
Language: Python - Size: 17.1 MB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 12 - Forks: 2

hartwork/antijack
:ninja: seccomp-based anti-TTY-hijacking proof-of-concept (prevents TIOCSTI and TIOCLINUX)
Language: C - Size: 70.3 KB - Last synced at: about 2 months ago - Pushed at: 7 months ago - Stars: 11 - Forks: 0

twseptian/cve-2022-22947
Spring Cloud Gateway Actuator API SpEL Code Injection (CVE-2022-22947)
Language: Dockerfile - Size: 26.5 MB - Last synced at: about 2 months ago - Pushed at: about 3 years ago - Stars: 11 - Forks: 1

v0lp3/CVE-2022-39073
Proof of concept for the command injection vulnerability affecting the ZTE MF286R router, including an RCE exploit.
Language: Python - Size: 75.2 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 10 - Forks: 2

MilindPurswani/hacker101 Fork of Hacker0x01/hacker101
Hacker101 is a free class for web security. Whether you're a programmer with an interest in bug bounties or a seasoned security professional, Hacker101 has something to teach you.
Language: Ruby - Size: 20.4 MB - Last synced at: about 2 years ago - Pushed at: almost 7 years ago - Stars: 10 - Forks: 0

dokDork/SiteSniper
bash script to automate the penetration test
Language: Shell - Size: 1.84 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 8 - Forks: 0

SystemVll/CVE-2022-47966
The manage engine mass loader for CVE-2022-47966
Language: Python - Size: 3.91 KB - Last synced at: 5 days ago - Pushed at: over 2 years ago - Stars: 7 - Forks: 1

superswan/CamMander
Exploit toolkit for old ip cameras. Inspired by Black Hat 2013 - Exploiting Network Surveillance Cameras Like a Hollywood Hacker
Language: Python - Size: 148 KB - Last synced at: 14 days ago - Pushed at: 6 months ago - Stars: 6 - Forks: 1

m3z0diac/vuln-windows-application
simple C vulnerable windows program for practicing and learning windows exploitation.
Language: C - Size: 720 KB - Last synced at: about 2 months ago - Pushed at: over 3 years ago - Stars: 6 - Forks: 1

abaykan/Labs
Repositori ini berisi file-file vulnerable terhadap bug tertentu yang saya jadikan demo pada artikel yang saya tulis di abaykan.com
Language: PHP - Size: 388 KB - Last synced at: about 3 hours ago - Pushed at: over 4 years ago - Stars: 6 - Forks: 5

FOGSEC/awesome-web-security Fork of R3dFruitRollUp/awesome-web-security
🐶 A curated list of Web Security materials and resources.
Size: 122 KB - Last synced at: over 1 year ago - Pushed at: over 7 years ago - Stars: 6 - Forks: 0

LinuxUser255/Web-Security-Academy-Series Fork of rkhal101/Web-Security-Academy-Series
Exploit Code, notes, and resources to accompany PortSwiggers' WebAcademy Labs.
Language: Python - Size: 32.4 MB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 5 - Forks: 2

Asjidkalam/CVE-2020-8958
CVE-2020-8958: Authenticated RCE exploit for NetLink HG323
Language: Python - Size: 2.93 KB - Last synced at: 10 months ago - Pushed at: about 4 years ago - Stars: 5 - Forks: 1

SaraBaradaran/Web-Fuzzer
Implementation of A Web Fuzzer for Detecting XSS, Command and SQL Injection Vulnerabilities in Websites
Language: Python - Size: 31.3 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 3 - Forks: 1

xfox64x/CVE-2019-3929
Crestron/Barco/Extron/InFocus/TeqAV Remote Command Injection (CVE-2019-3929) Metasploit Module
Language: Ruby - Size: 5.86 KB - Last synced at: about 1 year ago - Pushed at: over 5 years ago - Stars: 3 - Forks: 2

schoi1337/CVE-2025-20029-simulation
Simulated environment for CVE-2025-20029 using Docker. Includes PoC and auto-reporting.
Language: Python - Size: 385 KB - Last synced at: 24 days ago - Pushed at: 24 days ago - Stars: 2 - Forks: 0

0xNslabs/Rakuten5GTurboAPI
PoC API that exploits multiple vulnerabilities in the Rakuten 5G Turbo R2314M device
Language: Python - Size: 148 MB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 2 - Forks: 0

0xNslabs/SoftBankMeshAPI
PoC API that exploits multiple vulnerabilities in SoftBank RP562B mesh device.
Language: Python - Size: 11.7 KB - Last synced at: 5 months ago - Pushed at: 5 months ago - Stars: 2 - Forks: 0

TearsAchly/DVWA
DVWA (Damn Vulnerable Web Application) DVWA is a web application that is intentionally made vulnerable for educational and security testing purposes. It lets users practice and understand different types of web security attacks.
Language: PHP - Size: 11.7 KB - Last synced at: 11 months ago - Pushed at: 11 months ago - Stars: 2 - Forks: 0

K3ysTr0K3R/CVE-2019-15107-EXPLOIT
A PoC exploit for CVE-2019-1510 - Webmin Remote Code Execution
Language: Python - Size: 37.1 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 2 - Forks: 2

qwqoro/Mail-Injection
📧 [Research] E-Mail Injection: Vulnerable applications
Language: HTML - Size: 4.51 MB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 2 - Forks: 0

TheWation/CiCeSandbox
This web application provides a sandbox environment for testing and learning about command injection and code execution vulnerabilities, with several endpoints for testing different types of vulnerabilities.
Language: Python - Size: 5.86 KB - Last synced at: almost 2 years ago - Pushed at: almost 2 years ago - Stars: 2 - Forks: 0

anil-yelken/www-project-vulnerable-flask-app Fork of OWASP/www-project-vulnerable-flask-app
OWASP Foundation Web Respository
Size: 6.84 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 2 - Forks: 0

moeinfatehi/lfi-to-rce-scenario
This repository is a Dockerized php application containing a LFI (Local File Inclusion) vulnerability which can lead to RCE (Remote Code Execution).
Language: PHP - Size: 404 KB - Last synced at: about 2 years ago - Pushed at: almost 3 years ago - Stars: 2 - Forks: 0

tom474/security_attacks_analysis
[RMIT 2024C] COSC2539 - Security in Computing and IT - Programming-based Security Project
Language: Python - Size: 47.9 KB - Last synced at: 3 months ago - Pushed at: 4 months ago - Stars: 1 - Forks: 0

ILIASMORSEL/SecureShield
SecureShield — это мощная PHP-библиотека, которая защищает ваш проект от большинства известных атак: SQL-инъекции, XSS, CSRF, Command Injection, PHP Injection, и даже больше! Она готова к работе "из коробки", проста в использовании и может быть интегрирована в любой проект.
Language: PHP - Size: 10.7 KB - Last synced at: 6 months ago - Pushed at: 6 months ago - Stars: 1 - Forks: 0

A-Mahla/Security-Pentest-Part-I
The first in a series of four machines, each pen-tested and explained.
Language: Python - Size: 58.6 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 1 - Forks: 0

copyleftdev/PricklyPwn
An advanced RCE tool tailored for exploiting a vulnerability in Cacti v1.2.22. Crafted with precision, this utility aids security researchers in analyzing and understanding the depth of the CVE-2022-46169 flaw. Use responsibly and ethically.
Language: Go - Size: 2.93 KB - Last synced at: 8 days ago - Pushed at: over 1 year ago - Stars: 1 - Forks: 0

TheWation/CiCePhpbox
The command injection sandbox is a tool for testing command injection vulnerabilities in web apps, in a safe environment.
Language: PHP - Size: 5.86 KB - Last synced at: almost 2 years ago - Pushed at: almost 2 years ago - Stars: 1 - Forks: 0

WesleyWong420/Imageception
Flask Powered Vulnerable Image Generator
Language: Python - Size: 860 KB - Last synced at: about 2 years ago - Pushed at: about 2 years ago - Stars: 1 - Forks: 0

m3ssap0/cacti-rce-cve-2022-46169-vulnerable-application
WARNING: This is a vulnerable application to test the exploit for the Cacti command injection (CVE-2022-46169). Run it at your own risk!
Language: PHP - Size: 90.8 KB - Last synced at: 3 months ago - Pushed at: about 2 years ago - Stars: 1 - Forks: 2

danielserbu/SeleniumTestXVWACommandInjection
Language: Python - Size: 720 KB - Last synced at: over 1 year ago - Pushed at: over 2 years ago - Stars: 1 - Forks: 0

KIRAN-KUMAR-K3/vulnerability-payload-lists
A curated repository of categorized payloads for testing and exploiting common web vulnerabilities in ethical hacking and penetration testing.
Size: 91.8 KB - Last synced at: 19 days ago - Pushed at: 19 days ago - Stars: 0 - Forks: 0

Zizo0004/Detecting-Malicious-VSCode-extensions
detecting malicious/vulnerable vscode extensions. Focusing on XSS, Code injections, Command injections and path transversal attacks
Language: Jupyter Notebook - Size: 273 KB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 0 - Forks: 0

m3ssap0/cacti-rce-snmp-options-vulnerable-application
WARNING: This is a vulnerable application to test the exploit for the Cacti command injection (CVE-2023-39362). Run it at your own risk!
Language: PHP - Size: 41 KB - Last synced at: 3 months ago - Pushed at: 7 months ago - Stars: 0 - Forks: 0

Azad-02/Common-Vulnerabilities-and-Exploitations
The repository includes various vulnerbilities, their types, identification, exploitation and mitigations along with payloads. Includes: Cross-Site Scripting (XSS) SQL Injection (SQLi) Directory Traversal Command Injection
Size: 70.3 KB - Last synced at: 9 months ago - Pushed at: 9 months ago - Stars: 0 - Forks: 0

Kr1shna02/Portswigger_Labs
This repository includes my write-ups on popular web attacks from Portswigger Labs.
Size: 15.6 KB - Last synced at: 11 months ago - Pushed at: 11 months ago - Stars: 0 - Forks: 0

Backflipper1337/KeeneticOS-exploit-POC
mpsl exploit mirai rce command injection iot firmware poc
Language: Python - Size: 3.91 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 0 - Forks: 0

Gill-Singh-A/SHARN-Web-Desktop
A Simple CTF Challenge that expects user to see Client Side Login Algorithm, Path Traversal and Command Injection
Language: HTML - Size: 1.53 MB - Last synced at: 3 months ago - Pushed at: about 1 year ago - Stars: 0 - Forks: 0

K3ysTr0K3R/CVE-2024-3273-EXPLOIT
A PoC exploit for CVE-2024-3273 - D-Link Remote Code Execution RCE
Language: Python - Size: 7.81 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 0 - Forks: 0

dokDork/CommandInjectionShield
This script will prepare some tmux session precompiled to test command injection on some web page parameter (on a GET or POST request).
Size: 549 KB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 0 - Forks: 0

K3ysTr0K3R/CVE-2022-33891-EXPLOIT
A PoC exploit for CVE-2022-33891 - Apache Spark UI Remote Code Execution (RCE)
Language: Python - Size: 6.84 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0

0xNslabs/CVE-2022-36553-PoC
PoC Script for CVE-2022-36553: Exploits an unauthenticated remote command injection vulnerability in Hytec Inter HWL-2511-SS device.
Language: Python - Size: 1.95 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0

minj-ae/Banalyzer-CMDI
[Sunrin Security Project] Command Injection Static Analyzer with IDAPython
Language: Python - Size: 12.7 KB - Last synced at: 3 months ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0

mbadanoiu/CVE-2020-8250
CVE-2020-8250: Privilege Escalation via Command Injection in Pulse Secure VPN Linux Client
Size: 593 KB - Last synced at: 3 months ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0

De-Technocrats/dvwaupsploit
Tool for exploiting file upload vulnerabilities in DVWA (Damn Vulnerable Web Application).
Language: Python - Size: 81.1 KB - Last synced at: almost 2 years ago - Pushed at: almost 2 years ago - Stars: 0 - Forks: 0

ilmercu/Scanner-and-Command-Injection
Vulnerabilities scanner tool
Language: Python - Size: 77.1 KB - Last synced at: over 1 year ago - Pushed at: almost 3 years ago - Stars: 0 - Forks: 1

mark-by/proxy
Proxy сервер
Language: Go - Size: 253 KB - Last synced at: about 2 years ago - Pushed at: about 4 years ago - Stars: 0 - Forks: 0
