Next.js CVE-2025-29927

Eid Mubarak Everyone 🫶💟

Webshell Symlink3r 🕸

👩‍💻 WP-Shell3r Trial v0.3 👩‍💻

A full-featured WordPress shell uploader .

🔧 Tool Features :
✅ Upload Plugins via wp-login creds
✅ Upload Shell in WordPress uploads folder
✅ Upload Shell via File Manager
✅ Bypasses Mod_Security, Email Verification, DB Updates
✅ Auto Add Admin Users

📁 Results saved in organized folders
🖥 Real-time GUI with logs and stats
⚙️ Settings panel for customization

🆘🆘 [This is a Trial version — the paid version includes more advanced features!] 🆘🆘

📥 Download: Join and Download
📝 Details: Check the README in the zip!
📩 Join me: t.me/Moonlightcrow

✅ More tools are coming soon.
✅ Stay tuned...

JOIN 👉 https://t.me/Moonlightcrow 📱📱

👨‍💻 Coded by: Who Knows

we update it again . :3

🔍 Shell Checker v0.9.2 - Turbo-charged SEO & shell verifier with GUI ⚡️

🌟 Features:

📂 Dual modes: SEO Mode or Shell Check Mode .
✏️ Editable title.
🎨 Colorful output: green for alive, red for dead, yellow for sites.
📊 Live GUI & file updates (Alivexhell.txt, deadxhell.txt, seo.txt).

📥 Download: Join and Download
📩 Join me: t.me/Moonlightcrow

✅ More tools are coming soon.
✅ Stay tuned...

JOIN 👉 Moonlightcrow 📱📱

👨‍💻 Coded by: Who Knows

Lufix Uploader v0.1

This tool automates uploading shells, mailers, and SMTPs with Dynamic Pricing to your Lufix account directly from your desktop.

Features:

Multiple Upload Types: Supports shells, mailers, and SMTPs.
Multi-threaded , Dynamic Pricing ,Easy to Use , Log & Tracking , Saves Your Work

Install Libraries:

pip install requests PyQt6

Disclaimer: For educational purposes only.

By: Who Knows (https://t.me/Moonlightcrow)

Download : LINK

🚀 xLeet Shell Uploader v2.1

Disclaimer: For educational purposes only.

By: Who Knows (https://t.me/Moonlightcrow)

Download : LINK

Before New Year {hope so}

🚀 Lufix Items Uploader v1.91

Disclaimer: For educational purposes only.

By: Who Knows (https://t.me/Moonlightcrow)

Download : Here

🚀 DA / PA checker

Disclaimer: For educational purposes only.

By: Who Knows (https://t.me/Moonlightcrow)

Download : Here

WP-Shell3r v0.2 — WordPress Shell Uploader

✓ Plugin/Direct/File Manager upload
✓ WAF & verification bypass
✓ Auto admin creation
✓ Async GUI + retry system

Site format: site#user@pass | site|user|pass

Trial version : here

Price : $70 / blackscriptx
📩 @Moonlightcrow
⚠️ Authorized use only

Trial version for WP-Shell3r

⚡️ SMTP Sentinel — High-performance async SMTP tester with real-time WebSocket dashboard. Test thousands of credentials simultaneously, track live progress, visualize results with interactive charts & export to CSV. Built with FastAPI + aiosmtplib. Fast, sleek & powerful.
🔥 Features:
• Async testing (up to 200 concurrent)
• Real-time WebSocket updates
• Beautiful dark-themed UI
• CSV export with timestamps
• Auto SSL/TLS detection
Perfect for security testing & bulk SMTP validation.

install modules: pip install fastapi aiosmtplib uvicorn

Download Link : Here

WP Bruter
——————
Fast WordPress credential scanner.

FEATURES
• Auto-detects XML-RPC & wp-login attack surface
• Enumerates real usernames per site
• Smart password expansion — [user], [domain] tokens
• Built-in combos tried automatically (admin@admin, domain+user, etc.)
• High concurrency — scan hundreds of sites simultaneously
• Early exit on first hit — no wasted attempts
• Clean result files — hits saved instantly

HOW TO USE
1. Prepare site.txt — one URL per line
2. Prepare pass.txt — one password per line
3. Run wp-bruter.exe
4. Enter your files and concurrency when prompted
5. Check result\ folder for hits

RESULT FILES
result\wp-brute.txt — XML-RPC hits
result\wp-login.txt — wp-login hits
result\wordpress.txt — confirmed WP sites

PASSWORD TOKENS
[user] → replaced with the site's real username
[domain] → replaced with domain parts (example, shop, …)
Example: [domain]@[user] → shop@admin

Telegram: https://t.me/Moonlightcrow
Download : WP-BRUTER