burpsuite extension for check unauthorized vulnerability
-
Updated
Oct 7, 2020 - Python
#
unauthenticated
Here are 31 public repositories matching this topic...
Apache HugeGraph Server Unauthenticated RCE - CVE-2024-27348 Proof of concept Exploit
security hack exploit malware apache rce application-security bugbounty hacking-tool zero-day web-application-security unauthenticated penetration-testing-tools bugbountytips bugbounty-tool platform-security zero-day-exploit cve-2024-27348 hugehraph one-day-exploit
-
Updated
Jun 3, 2024 - Python
Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self-cleaning, token-guarded. Authorized testing only.
proof-of-concept exploit joomla penetration-testing poc rce vulnerability web-security unauthenticated sp-page-builder remote-code-execution arbitrary-file-upload sppagebuilder cve-2026-48908
-
Updated
Jun 23, 2026 - Python
A Python script to extract the list of users of a GiTea instance, unauthenticated or authenticated.
-
Updated
Feb 11, 2025 - Python
🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScripy). it establish an encrypted connection and inject keystrokes without user authorization. The vulnerability was discovered by Marc Newlin of SkySafe. it affects multiple operating systems including Android, Linux, macOS and iOS.
hid peer-to-peer bluetooth python3 cybersecurity wireless payload hacking-tool duckyscript rubberducky unauthenticated peering hidkeyboard hidattack blueducky hackwithakki yourbihari hackwithakki-github hackwithakki-blueducky besafe
-
Updated
Jul 16, 2025 - Python
Unauthenticated PHP Object Injection to RCE in WP Activity Log <= 5.6.3.1 (CVE-2026-54806)
wordpress proof-of-concept exploit deserialization poc rce wordpress-security cve unauthenticated remote-code-execution php-object-injection cve-2026-54806 wp-activity-log
-
Updated
Jun 22, 2026 - Python
Kumpulan Exploit Wordpress Plugins + Tools + and cara penggunaannya
python wordpress file-upload python3 rce cve unauthenticated remote-code-execution plugins-wordpress
-
Updated
Dec 24, 2020 - Python
Perform With Massive Openfire Unauthenticated Users
-
Updated
Jul 24, 2023 - Python
wp2shell - WordPress CVE-2026-63030 Exploit & Scanner
python wordpress exploit rce sql-injection security-tools vulnerability-scanner unauthenticated unauthenticated-rce wp2shell wp2shell-poc cve-2026-63030
-
Updated
Jul 18, 2026 - Python
Critical RCE vulnerability (CVSS 9.3) in Weaver E-cology platform versions prior to build 20260312. Unauthenticated remote code execution via exposed debug endpoint at /papi/esearch/data/devops/dubboApi/debug/method. Comprehensive analysis, proof-of-concept, and detection guidance included.
-
Updated
Apr 16, 2026 - Python
Atlassian Confluence (CVE-2022-26134) - Unauthenticated OGNL injection vulnerability (RCE).
python rce infosec payload atlassian-confluence unauthenticated cve-2022-26134 ognl-injection-vulnerability
-
Updated
Jul 5, 2022 - Python
CVE-2026-48908 — PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. Multi‑threaded, case‑bypass, shell verification. For authorized security testing only.
security exploit file-upload joomla rce vulnerability pentest unauthenticated sp-page-builder joomshaper cve-2026-48908
-
Updated
Jul 8, 2026 - Python
CVE-2026-58138 — Conductor (3.21.21..<3.30.2) unauthenticated RCE via INLINE GraalVM evaluator (HostAccess.ALL). Lab + PoC, verified e2e (root).
proof-of-concept exploit cybersecurity poc rce bug-bounty graalvm conductor code-injection red-team security-research unauthenticated vulnerability-research remote-code-execution netflix-conductor orkes-conductor sandbox-bypass python-exploit cve-2026-58138 cwe-94
-
Updated
Jul 15, 2026 - Python
Python scripts to find ADCS servers on a network without any credentials.
certificates active-directory pentest exploitation reconnaissance unauthenticated adcs redteam-tools
-
Updated
Apr 22, 2025 - Python
CVE-2026-12940 — Langflow OSS <=1.10.1 unauthenticated RCE via MCP stdio environment-variable injection (SHELLOPTS/PS4). Author PoC + source analysis + lab.
-
Updated
Aug 3, 2026 - Python
A light & organized Python module built with the sole purpose of extracting a Twitter user-object while conforming to Tweepy standards, all without using Twitter's authenticated API.
twitter-bot automation osint twitter tools integration twitter-api twitter-automation reconnaissance unauthenticated unauthenticated-requests
-
Updated
Nov 1, 2022 - Python
CVE-2026-55579 – Unauthenticated RCE in Pheditor via hardcoded default password "admin". Full Python exploit with file upload & terminal execution. No dependencies.
python exploit file-upload rce cve unauthenticated file-editor default-credentials severity cve-2026 cwe-798 cwe-94 cve-2026-55579 pheditor
-
Updated
Jul 17, 2026 - Python
CVE-2026-56782 — Gorse <0.5.10 unauthenticated DB dump/restore (admin_api_key fail-open). Lab + PoC, verified e2e.
poc recommender-system data-exfiltration authentication-bypass security-research unauthenticated gorse cve-2026-56782
-
Updated
Jun 30, 2026 - Python
CVE-2026-95675 · POC
router exploit firmware poc rce tp-link dlink command-injection unauthenticated cve-2026-95675 root-rce
-
Updated
Sep 24, 2026 - Python
Add this topic to your repo
To associate your repository with the unauthenticated topic, visit your repo's landing page and select "manage topics."