渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

exploit penetration-testing poc rce csrf cve bypass thinkphp cobalt-strike authentication-bypass getshell penetration-testing-poc csrf-webshell sql-poc poc-exp oa-getshell cve-cms php-bypass sql-getshell

• Updated Nov 12, 2026
• HTML

Top disclosed reports from HackerOne

security xss rce reports sql-injection csrf writeups bugbounty ssrf hackerone xxe idor

• Updated Nov 7, 2026
• Python

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

database exploit scanner hacking password poc rce brute-force pentest bypass crack privilege-escalation exp lpe 0day getshell netscan

• Updated Jan 25, 2025
• PowerShell

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

rce vulnerability springboot springcloud springboot-actuator-rce spring-boot-vulnerability spring-vulnerability spring-actuator-vulnerability

• Updated Mar 10, 2021
• Java

Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

security exploit scanner rce pentesting vulnerabilities cve security-tools pentest-tool cve-2020-2555 cve-2020-2883 cve-2016-4437 cve-2020-14882 cve-2020-13942 cve-2020-17518 cve-2021-21972 cve-2021-26855 cve-2021-27065 cve-2021-21975 cve-2021-3129

• Updated Apr 26, 2023
• Python

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

mysql redis postgresql zabbix rce smtp gopher memcache fastcgi ssrf github-rce

• Updated Apr 18, 2023
• Python

Java web common vulnerabilities and security code which is base on springboot and spring security

java cors security benchmark web code tomcat jsonp rmi rce deserialize sqli ssrf xxe spel

• Updated Dec 2, 2024
• Java

利用大量高威胁poc/exp快速获取目标权限，用于渗透和红队快速打点

poc rce cve exp vulnerability-scanner redteam getshell poc-bomber

• Updated Jun 9, 2023
• Python

Penelope Shell Handler

reverse-shell tty pty rce ctf ctf-tools oscp shell-handler hackthebox oscp-tools tryhackme

• Updated Sep 27, 2026
• Python

Notes about attacking Jenkins servers

jenkins exploit hacking rce pentest

• Updated Jul 10, 2024
• Python

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

dns database spring-boot dictionary fingerprint wifi password bruteforce subdomain rce fuzzing pentesting regex-pattern bugbounty pentest payloads iot-security websecurity bugbountytips bughunting-methodology

• Updated Jul 21, 2023
• Shell

Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

windows security registry kernel rootkit driver rce malware-analysis

• Updated Jul 13, 2022
• C

CVE-2026-109618/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.

exploit poc rce php-security wordpress-security detection-rules vulnerability-research suricata-rules waf-rules php-exploit session-upload-progress cve-2026-109618 cve-2026-109619 php2shell

• Updated Oct 28, 2026
• Python

Awesome list of step by step techniques to achieve Remote Code Execution on various apps!

cms framework exploit code rce awesome-list execution bugbounty

• Updated Oct 7, 2023
• Dockerfile

A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.

python application osint web spider passive scanner xss scan owasp rce sqli vulnerability csrf active bugbounty fuzzer automated lfi rfi

• Updated Apr 17, 2026
• Python

Automatic SSTI detection tool with interactive interface

python penetration-testing rce pentesting pentest information-security pentest-tool ssti pentesting-tools penetration-testing-tools

• Updated Aug 25, 2026
• Python

Miscellaneous exploit code

python windows php security hacking exploits poc rce bypass tr-064

• Updated Oct 6, 2023
• Python

Check your WAF before an attacker does

python waf xss python3 rce bypass lfi rfi nosql-injection sqli-injection ssti path-traversal graphql-injection waf-testing api-security-testing waf-bypass-tool

• Updated Jul 20, 2026
• Python

Redis(<=5.0.5) RCE

redis rce

• Updated Sep 24, 2023
• C

Getting started with java code auditing 代码审计入门的小项目

java sql code xss jackson rce fastjson ssrf weblogic vulnerability-analysis

• Updated Feb 22, 2023
• JavaScript