Advanced Exploitation Toolkit for Next.js Server Actions (CVE-2025-55182)
☆56Dec 12, 2025Updated 10 months ago
Alternatives and similar repositories for React2Shell
Users that are interested in React2Shell are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2026-34910/34909 — UniFi OS unauth RCE + file read via ..%2f auth bypass (CVSS 10.0, KEV, Mirai ITW)☆13Aug 21, 2026Updated 2 months ago
- Updated Exploit - pfBlockerNG <= 2.1.4_26 Unauth RCE (CVE-2022-31814)☆23Jul 23, 2024Updated 2 years ago
- CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)☆36Updated this week
- Notes for the PJPT exam!☆14Aug 8, 2024Updated 2 years ago
- An AI-powered penetration testing framework featuring a primary orchestration agent and 24 specialized sub-agents for authorized security…☆18Sep 25, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆11Jun 9, 2023Updated 3 years ago
- exploit for Log4j2 (issue 4255)☆18Aug 27, 2026Updated 2 months ago
- ACE Analyzer for identifying ESC1-8 vulnerabilities (Written by AI)☆42Jul 4, 2026Updated 3 months ago
- byebyeAV is a tool created by @amroes which bypassed the latest version at the time of windows defender, Sophos and Kaspersky☆14Sep 5, 2025Updated last year
- Acunetix automate telegram bot☆12Jul 19, 2024Updated 2 years ago
- Bulk scanning tool for ServiceNow CVE-2024-4879 vulnerability☆10Jul 12, 2024Updated 2 years ago
- ☆27Oct 25, 2026Updated last week
- SolarView Compact through 6.00 downloader.php commands injection (RCE) nuclei-templates☆15Jun 16, 2023Updated 3 years ago
- A python script to automatically dump files and source code of a Symfony server in debug mode.☆14Sep 8, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Advance and Easy recon methodology☆13Aug 9, 2024Updated 2 years ago
- A hand-picked collection of the best bug bounty & web security writeups — libraries, publications, hunters, and Telegram feeds, all in on…☆29Sep 22, 2026Updated last month
- ☆20Oct 10, 2025Updated last year
- Proof of Concept for CVE-2026-23745: Arbitrary File Overwrite vulnerability in node-tar (versions < 7.5.3).☆23Jan 17, 2026Updated 9 months ago
- End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfilte…☆29Aug 26, 2026Updated 2 months ago
- Kubernetes Enumeration Tools for Penetration Testing - K8s security assessment scripts for red team operations☆17Apr 17, 2026Updated 6 months ago
- A python tool to generate an Excel file linking the list of cracked accounts and their LDAP attributes.☆12Jan 31, 2025Updated last year
- Laravel RCE Exploitation Toolkit☆58Nov 8, 2025Updated 11 months ago
- Deception LLM Guardrail that deceives perceived adversarial queries instead of refusing them.☆14Apr 15, 2026Updated 6 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆18Jul 9, 2020Updated 6 years ago
- Reflected XSS Payload List for Vue.js (2 & 3)☆16Jan 12, 2023Updated 3 years ago
- CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution☆33Jan 13, 2026Updated 9 months ago
- FortiSandbox RCE Scanner — CVE-2026-39808☆26Apr 21, 2026Updated 6 months ago
- Offsec Proving Grounds Writeup☆15Sep 30, 2026Updated last month
- Fast, parallel and easy to use web crawler for penetration testing and bug bounty☆14Oct 21, 2026Updated last week
- python webapp for finding contact forms by using google dorking☆14Feb 20, 2026Updated 8 months ago
- Chakra Type Confusions - PoCs of Edge's legacy JS engine vulnerabilities that inject code into the JIT process☆20Mar 26, 2024Updated 2 years ago
- dAescrypt.py is a multithreaded brute-force tool to crack .aes files encrypted using the pyAesCrypt library. It supports password length …☆18Aug 1, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- POC for CVE-2024-31982: XWiki Platform Remote Code Execution > 14.10.20☆10Jun 22, 2024Updated 2 years ago
- Pre-auth RCE via FilteredObjectInputStream MarshalledObject bypass in Apache Log4j 2☆39Aug 26, 2026Updated 2 months ago
- This repository contains random Nuclei templates I've created. Most of them based on recent security issues and exploits.☆18May 21, 2024Updated 2 years ago
- CVE-2026-1731 - Critical command injection vulnerability in BeyondTrust Remote Support and Privileged Remote Access due to unsafe Bash ar…☆37Feb 11, 2026Updated 8 months ago
- CVE-2025-55182 - React Server Components RCE Exploit & Scanner Supports external servers and CLI interface☆15Dec 5, 2025Updated 10 months ago
- Havoc SSRF to RCE☆16Jan 20, 2025Updated last year
- react2shell CVE-2025-55182 PoC☆34Dec 7, 2025Updated 10 months ago