An analysis of CVE-2025-55182 and CVE-2025-66478 -- the vulnerabilities behind React2Shell. Tools, technical information, etc
☆70Dec 5, 2025Updated 10 months ago
Alternatives and similar repositories for react2shell
Users that are interested in react2shell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆23Jun 5, 2026Updated 4 months ago
- ☆30Sep 8, 2025Updated last year
- ☆19Mar 23, 2026Updated 7 months ago
- ☆15May 25, 2026Updated 5 months ago
- ☆14Apr 9, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A Proof of Concept for chaining CVE-2025-6018 (PAM/Polkit Active Session Bypass) and CVE-2025-6019 (libblockdev SUID Mount Flaw) to achie…☆16Feb 9, 2026Updated 8 months ago
- # 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner☆25Jul 13, 2025Updated last year
- Exploitation of CVE-2026-24061☆209Jan 22, 2026Updated 9 months ago
- This Python PoC exploits CVE-2024-46987, a Path Traversal bug in Camaleon CMS 2.8.0 < 2.8.2 (work on 2.9.0). It allows authenticated use…☆27May 10, 2026Updated 5 months ago
- A script to load demo data into Gophish☆13Apr 3, 2023Updated 3 years ago
- The provided exploit code leverages a stored Cross-Site Scripting (XSS) vulnerability (CVE-2024-4439) in WordPress Core versions up to 6.…☆12May 6, 2024Updated 2 years ago
- A simple example for illustrating security best practices with Docker☆12Oct 19, 2020Updated 6 years ago
- Generate obfuscated PowerShell commands using XOR logic with random keys!☆12Apr 7, 2025Updated last year
- ☆27Jun 21, 2026Updated 4 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This is the companion repo for a copy of all code, references, and extras noted by the Evasion Engineering book from NoStarch Publishing …☆33Apr 20, 2026Updated 6 months ago
- needed stuff☆12Aug 26, 2019Updated 7 years ago
- Test ROM for NES Zapper with 2-player air hockey simulator☆13Jun 17, 2024Updated 2 years ago
- Python script that will attempt connection to unauthenticated VNC sessions on the entire Internet and take a screenshot of the user's cur…☆18Jul 8, 2018Updated 8 years ago
- Scripts to automate RECON process☆12Aug 31, 2025Updated last year
- Collect XSS vulnerable parameters from entire domain.☆14Jul 29, 2022Updated 4 years ago
- CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)☆13Aug 21, 2026Updated 2 months ago
- Repository for public artifacts related to the practice of secure code review☆12Nov 13, 2019Updated 6 years ago
- Maintained by the ANY.RUN team, this repository provides YARA rules to help detect and classify various malware families and other malici…☆31Oct 20, 2026Updated last week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 …☆14Oct 8, 2026Updated 3 weeks ago
- ☆11Sep 15, 2024Updated 2 years ago
- Runtime enforcement of software supply chain capabilities in Go☆23Sep 21, 2026Updated last month
- lightweight mcp server vibe coded with Cursor☆14Dec 30, 2025Updated 10 months ago
- ☆11Jan 22, 2026Updated 9 months ago
- Examples for Gophish templates.☆17May 19, 2023Updated 3 years ago
- An open-source AI assisted firmware analysis tool☆15Mar 5, 2026Updated 7 months ago
- T&C and Privacy Policy for our website: https://radicallyopensecurity.com/☆18Jul 1, 2026Updated 3 months ago
- Mobile Mouse 3.6.0.4 could allow a remote attacker to execute arbitrary code on the system, caused by improper input validation. By sendi…☆13Apr 2, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- AI-driven Dynamic Application Security Testing tool for security engineers. Combines an HTTPS MITM proxy with a multi-agent scanner and …☆50Updated this week
- ☆21Oct 22, 2026Updated last week
- Werkzeug password cracker☆21Nov 14, 2024Updated last year
- ☆14Aug 10, 2026Updated 2 months ago
- ☆13Feb 25, 2025Updated last year
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆114Oct 6, 2026Updated 3 weeks ago
- CVE-2021-26855, also known as Proxylogon, is a server-side request forgery (SSRF) vulnerability in Exchange that allows an attacker to …☆12Jan 1, 2024Updated 2 years ago