😈 Jenkins RCE PoC. From unauthenticated user to remote code execution, it's a hacker's dream!

jenkins exploit hacking rce unauthenticated orangetw

• Updated Jun 10, 2019
• Java

burpsuite extension for check unauthorized vulnerability

checker vulnerability burp-plugin burpsuite unauthenticated

• Updated Oct 7, 2020
• Python

Apache HugeGraph Server Unauthenticated RCE - CVE-2024-27348 Proof of concept Exploit

security hack exploit malware apache rce application-security bugbounty hacking-tool zero-day web-application-security unauthenticated penetration-testing-tools bugbountytips bugbounty-tool platform-security zero-day-exploit cve-2024-27348 hugehraph one-day-exploit

• Updated Jun 3, 2024
• Python

Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self-cleaning, token-guarded. Authorized testing only.

proof-of-concept exploit joomla penetration-testing poc rce vulnerability web-security unauthenticated sp-page-builder remote-code-execution arbitrary-file-upload sppagebuilder cve-2026-48908

• Updated Jun 23, 2026
• Python

🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScripy). it establish an encrypted connection and inject keystrokes without user authorization. The vulnerability was discovered by Marc Newlin of SkySafe. it affects multiple operating systems including Android, Linux, macOS and iOS.

hid peer-to-peer bluetooth python3 cybersecurity wireless payload hacking-tool duckyscript rubberducky unauthenticated peering hidkeyboard hidattack blueducky hackwithakki yourbihari hackwithakki-github hackwithakki-blueducky besafe

• Updated Jul 16, 2025
• Python

A Python script to extract the list of users of a GiTea instance, unauthenticated or authenticated.

osint extract users gitea unauthenticated

• Updated Feb 11, 2025
• Python

Unauthenticated PHP Object Injection to RCE in WP Activity Log <= 5.6.3.1 (CVE-2026-54806)

wordpress proof-of-concept exploit deserialization poc rce wordpress-security cve unauthenticated remote-code-execution php-object-injection cve-2026-54806 wp-activity-log

• Updated Jun 22, 2026
• Python

Kumpulan Exploit Wordpress Plugins + Tools + and cara penggunaannya

python wordpress file-upload python3 rce cve unauthenticated remote-code-execution plugins-wordpress

• Updated Dec 24, 2020
• Python

DefaultHound — 批量检测服务默认密码的安全扫描工具，一键发现高危弱凭据。| DefaultHound — A batch scanner that hunts default/empty passwords across network services.

scanner pentest unauthenticated redt weakpasswords

• Updated Jun 15, 2026
• Rust

Perform With Massive Openfire Unauthenticated Users

openfire unauthenticated rce-exploit

• Updated Jul 24, 2023
• Python

Critical RCE vulnerability (CVSS 9.3) in Weaver E-cology platform versions prior to build 20260312. Unauthenticated remote code execution via exposed debug endpoint at /papi/esearch/data/devops/dubboApi/debug/method. Comprehensive analysis, proof-of-concept, and detection guidance included.

java cybersecurity rce cve weaver unauthenticated vulnerability-research ecology-oa enterprise-oa

• Updated Apr 16, 2026
• Python

Atlassian Confluence (CVE-2022-26134) - Unauthenticated OGNL injection vulnerability (RCE).

python rce infosec payload atlassian-confluence unauthenticated cve-2022-26134 ognl-injection-vulnerability

• Updated Jul 5, 2022
• Python

CVE-2026-12940 — Langflow OSS <=1.10.1 unauthenticated RCE via MCP stdio environment-variable injection (SHELLOPTS/PS4). Author PoC + source analysis + lab.

security exploit mcp poc rce command-injection unauthenticated langflow cve-2026-12940

• Updated Aug 3, 2026
• Python

CVE-2026-48908 — PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. Multi‑threaded, case‑bypass, shell verification. For authorized security testing only.

security exploit file-upload joomla rce vulnerability pentest unauthenticated sp-page-builder joomshaper cve-2026-48908

• Updated Jul 8, 2026
• Python

Exploit para CVE-2026-4480: inyeccion de comandos en la variable %J del print command de Samba para RCE sin autenticacion via spoolss.

python linux exploit samba cybersecurity poc rce pentesting cve command-injection unauthenticated cve-2026-4480 spoolss

• Updated Oct 3, 2026
• Python

CVE-2023-26269: Misconfigured JMX in Apache James

cve local-privilege-escalation unauthenticated mlet cves 0-day cve-2023-26269

• Updated Nov 23, 2023

CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).

proof-of-concept exploit cybersecurity poc rce bug-bounty graalvm conductor code-injection red-team security-research unauthenticated vulnerability-research remote-code-execution netflix-conductor orkes-conductor sandbox-bypass python-exploit cve-2026-58138 cwe-94

• Updated Jul 15, 2026
• Python

Working PoC for CVE-2025-32432 - Craft CMS <= 5.6.16 unauthenticated RCE via Yii2 PhpManager gadget + nginx access.log poisoning

security yii2 exploit poc rce ctf cve pentest craft-cms unauthenticated cve-2025-32432

• Updated May 15, 2026
• Python

Python scripts to find ADCS servers on a network without any credentials.

certificates active-directory pentest exploitation reconnaissance unauthenticated adcs redteam-tools

• Updated Apr 22, 2025
• Python

A light & organized Python module built with the sole purpose of extracting a Twitter user-object while conforming to Tweepy standards, all without using Twitter's authenticated API.

twitter-bot automation osint twitter tools integration twitter-api twitter-automation reconnaissance unauthenticated unauthenticated-requests

• Updated Nov 1, 2022
• Python