Automated All-in-One OS Command Injection Exploitation Tool.

🎯 Command Injection Payload List

Awesome Pentest Tools Collection

small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns

Local File Inclusion discovery and exploitation tool

Egyscan The Best web vulnerability scanner; it's a multifaceted security powerhouse designed to fortify your web applications against malicious threats. Let's delve into the tasks and functions that make Egyscan an indispensable tool in your security arsenal:

[PoC] Command injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)

NLP model and tech for cyber security tasks

OS Command Injection Vulnerability Payload List

Simple machine learning based web application firewall (WAF) created in python

CVE-2018-19537

μετάμάσκα - malevolent payload classifier

Perform with Massive Command Injection (Chamilo)

Exploit POC code for CVE-2022-31898, a command injection for GL-iNet routers with firmware below 3.215

Blind RCE fuzzer

Exploit for CVE-2022–25765 (pdfkit) - Command Injection

Spring Cloud Gateway Actuator API SpEL Code Injection (CVE-2022-22947)

The largest hacking program with new tools CVE-2023-PoC for the year 2023 It contains all the attack and exploitation tools for testing websites, as well as a graphical interface to facilitate its use for beginners

Hacker101 is a free class for web security. Whether you're a programmer with an interest in bug bounties or a seasoned security professional, Hacker101 has something to teach you.

🥷 seccomp-based anti-TTY-hijacking proof-of-concept (prevents TIOCSTI and TIOCLINUX)