command-injection

Automated Αll-in-One OS command injection exploitation tool.

Local File Inclusion discovery and exploitation tool

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:

Waymap is a fast and optimized web vulnerability scanner built for penetration testers. It helps in identifying vulnerabilities by testing against various payloads.

Exploit for CVE-2022–25765 (pdfkit) - Command Injection

Test a URL or captured HTTP request for RCE—and know what the evidence actually proves. RCEKit checks command injection, SSTI and blind paths, separates confirmed execution from uncertain signals and untested runs, and generates targeted payloads for Burp, ffuf and Nuclei. One Python file; no third-party dependencies.

Perform with Massive Command Injection (Chamilo)

The largest hacking program with new tools CVE-2023-PoC for the year 2023 It contains all the attack and exploitation tools for testing websites, as well as a graphical interface to facilitate its use for beginners

CVE-2018-19537

Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215

Open source toolkit for WebSocket security testing, web application penetration testing, and stateful attack validation. It combines a CLI scanner, web dashboard, Electron desktop app, browser companion, and project-backed workflows for authorized security assessments.

Upgrade any RCE primitive to a semi-interactive session, with an mkfifo forward shell for filtered-egress targets and modular post-exploitation actions.

Blind RCE fuzzer

Collection of my CVEs and their exploits

PoC Script for CVE-2022-36267: Exploits an unauthenticated remote command injection vulnerability in Airspan AirSpot 5410 antenna.

Proof of concept for the command injection vulnerability affecting the ZTE MF286R router, including an RCE exploit.

Exploit toolkit for old ip cameras. Inspired by Black Hat 2013 - Exploiting Network Surveillance Cameras Like a Hollywood Hacker

👻 GHOST - Web Pentest Framework | "Alone and on the prowl" | Reconhecimento, detecção e exploração de vulnerabilidades web em Python 🚀

CVE-2020-8958: Authenticated RCE exploit for NetLink HG323

The manage engine mass loader for CVE-2022-47966