Transition form local file inclusion attacks to remote code exection
☆74Aug 26, 2020Updated 6 years ago
Alternatives and similar repositories for LFI---RCE-Cheat-Sheet
Users that are interested in LFI---RCE-Cheat-Sheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Can run a payload shellcode in-memory by injecting a process. (does not bypass AV).☆15Sep 1, 2025Updated last year
- Jenkins pre-auth RCE exploit. More info at https://jenkins.io/security/advisory/2019-01-08/#SECURITY-1266 https://blog.orange.tw/2019/02/…☆10Mar 15, 2019Updated 7 years ago
- Bypassing File Upload Restriction using Magic Bytes☆21Jul 4, 2022Updated 4 years ago
- Command-line client to interact with Hack The Box☆15Apr 9, 2020Updated 6 years ago
- A set of scripts to help automate the management of Burp Collaborator☆14Sep 5, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A platform based on Node & RasPi to allow anyone to easily build apps and games for a NeoPixel table.☆10Mar 5, 2023Updated 3 years ago
- This repository contains a mindmap for different techniques for using Censys Search☆15Sep 17, 2025Updated last year
- An Android app for managing SickBeard.☆14Sep 20, 2018Updated 8 years ago
- Bash scripts to automate the burpsuite's certificate configuration and proxying of an Android device for penetration test.☆22May 26, 2025Updated last year
- Vulnerable web site. Used to test sentinel features.☆11Nov 18, 2016Updated 9 years ago
- A list of different types of API keys and how to prove impact for bug bounty programs.☆14Sep 23, 2023Updated 3 years ago
- Self collected Metasploit module (include self maintaining)☆10Dec 25, 2023Updated 2 years ago
- PoC for CVE-2022-46169 - Unauthenticated RCE on Cacti <= 1.2.22☆29May 5, 2023Updated 3 years ago
- A Sublime Text plugin that allows for Nmap syntax highlighting☆13Sep 14, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- List of payloads: reverse shell, bind shell, webshell.☆16Feb 26, 2022Updated 4 years ago
- 🏆 Projeto realizado no primeiro semestre da faculdade de tecnologia @BandTec, aplicando todo conhecimento aprendido☆12Oct 19, 2023Updated 3 years ago
- Some extra regex patterns for tomnomnom's excellent tool GF☆11Sep 7, 2022Updated 4 years ago
- This repository contains a graphical representation (Mind maps) of specific topics, so one can utilize it as a handbook for that specific…☆15Feb 10, 2022Updated 4 years ago
- Active Directory reconnaissance & attack tool for authorized pentesting — LDAP, Kerberos, user enum, Kerberoasting, AS-REP Roasting, risk…☆11Mar 6, 2026Updated 7 months ago
- My backdoor script for a vulnerable version of UnrealIRCd☆27Apr 29, 2024Updated 2 years ago
- ☆35Oct 25, 2023Updated 3 years ago
- Monitor your study sessions, log your study hours, set goals, and watch your productivity progress.☆10May 19, 2024Updated 2 years ago
- A tweaked out version of : https://github.com/unprovable/LoRaChat/blob/master/LoRaChat.ino to make the client autonomous☆12May 21, 2018Updated 8 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Damn Vulnerable Rails app☆16Sep 20, 2012Updated 14 years ago
- Browser agnostic extension that enables pasting into password fields...☆15Jan 12, 2020Updated 6 years ago
- PrestaXSRF is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's critical…☆33Dec 26, 2023Updated 2 years ago
- Proof-of-concept exploits and reproduction labs for CVEs analyzed by the Exploit Intelligence Platform☆28Updated this week
- vulnerable lab for web security training☆15Feb 20, 2026Updated 8 months ago
- Magisk Plugin for Updating iptables When Proxy Changes☆11Mar 17, 2025Updated last year
- ⚡ Starter Kit to build static websites fast with Middleman and Bootstrap☆11Oct 18, 2024Updated 2 years ago
- Python3 wrapper for the Security Trails API☆10May 18, 2020Updated 6 years ago
- ☆14Oct 1, 2026Updated 3 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A collection of config files for linux focusing on hackthebox theme☆56Apr 10, 2026Updated 6 months ago
- CVE-2026-1357 — WPvivid Backup & Migration ≤ 0.9.123 Unauthenticated RCE Exploit☆17Feb 26, 2026Updated 8 months ago
- A web application for generating custom XSS payloads☆79Dec 29, 2019Updated 6 years ago
- Privilege escalation in Docker☆32Jun 30, 2022Updated 4 years ago
- A tool to notify you of the latest changes in bug bounty programs.☆16Jan 24, 2025Updated last year
- Pentester plugin for Oh-My-Zsh. Boosting efficiency & and saving time with common initial tasks for pentesting☆20Jan 23, 2025Updated last year
- Remote Task Scheduler Enumeration☆14Jul 9, 2024Updated 2 years ago