Getting started with java code auditing 代码审计入门的小项目

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit

Foxit PDF Reader Remote Code Execution Exploit

Website for RCE

Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit

NodeJS Deserialization Payload Generator

A discord bot

CVE-2020-28502 node-XMLHttpRequest RCE

VR Man-in-the-Room Attack and Command & Control Server Proof of Concept — Bigscreen

🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.

⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.

🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.

Notes for draftjs.

WordPress RCE - Authenticated XXE (CVE-2021-29447)

🔍 Detect and demonstrate RCE vulnerabilities in React Server Components and Next.js with this comprehensive security research toolkit.

🔍 Extract and construct missing parameters from JavaScript files for effective unauthorized testing, enhancing your API engagement strategy.

React2Shell (CVE-2025-55182) proof-of-concept (PoC) exploit demonstrating a CRITICAL remote code execution (RCE) vulnerability in modern web frameworks using React Server Components (RSC).

🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.