rce-scanner 开源项目推荐（22 个）

0xInfection /LogMePwn

A fully automated, reliable, super-fast, scanning and validation toolkit for the Log4J RCE CVE-2021-44228 vulnerability.

AlaBouali /bane

The "bane" Python library stands out as a robust toolkit catering to a wide spectrum of cybersecurity and networking tasks. Its versatile range of functionalities covers various aspects, including bruteforce attacks, cryptographic methods, DDoS attacks, information gathering, botnet creation and management, and CMS vulnerability scanning and more..

aarsaputra /php2shell

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

aancw /php2shell-scanner

Scanner for PHP2Shell (CVE-2026-109618/109619): URL blackbox, local device and SSH.

Err0r-ICA /SCANter

Websites Vulnerability Scanner

JoelGMSec /Thunderstorm

Modular framework to exploit UPS devices

sammwyy /R2SAE

React2Shell Auto Exploit: A CLI tool to exploit prototype pollution vulnerabilities (RCE) in React Server Actions

Mr-xn /CVE-2025-54424

CVE-2025-54424：1Panel 客户端证书绕过RCE漏洞 一体化工具 (扫描+利用)

securelayer7 /CVE-2024-38856_Scanner

Apache OFBiz RCE Scanner & Exploit (CVE-2024-38856)

odaysec /PwnTraverse

PwnTraverse, An advanced path traversal & endpoint vulnerability scanner for security researchers, bug bounty hunters, and penetration testers. Detects path traversal flaws, performs deep directory enumeration, and identifies CVE-related issues automatically.

im-hanzou /larapler

LARAPLER - Laravel Random Exploit

thenurhabib /s4sScanner

Advance Spring4Shell RCE Vulnerability Scanner.

InMyMine7 /WordPressChan

Wordpress Plugins RCE Made With Love :3

C00LN3T /Spring4Shell

A vulnerability scanner and exploitation framework targeting Spring, GraphQL, and React Server Components (RSC) stacks. Features dynamic WAF evasion, passive/active auditing, Out-of-Band (OOB) verification, and multi-format enterprise reporting. Built for security researchers and authorized penetration testers.

hophtien /CVE-2025-54424

CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐

MadExploits /phpunit-exploit-nuclei-template

Phpunit exploit nuclei template

JoshuaProvoste /Deserializer

AST-based Static Code Analyzer with Agentic LLM-Powered Relationship Mapping to discover Python RCE paths and deep deserialization chains on AI, LLM, Robotics, Data Science, Machine Learning and any kind of Python Source Code.

drcayber /RCE

CVE-2022-31814

0xjessie21 /wp2shell-checker

WordPress Core Unauthenticated RCE (CVE-2026-63030, CVE-2026-60137)

Cappricio-Securities /CVE-2015-1635

Microsoft Windows 'HTTP.sys' - Remote Code Execution