Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Einreichen
ToolsExploitsBlog
Einreichen

Hacking-, PenTest- und Cybersicherheits-Tools für Ihr Sicherheitsarsenal!

Kitploit ist ein Verzeichnis von Hacking-, Cybersicherheits- und Pentesting-Tools. Entdecken Sie die neuesten Projekt-Updates, um Schwachstellen zu finden, Systeme zu analysieren, Tests zu automatisieren und Ihre Sicherheit zu stärken.

··Feeds·Kontakt·Datenschutz·© 2026 Kitploit

Tool-Verzeichnis

Kategorien

Alle Kategorien anzeigen
Loading categories
pocindex — Search 82,000+ public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub. | Kitploit
Tools/GitHubGitHub/0xmarcio/pocindex
OSINT (Open Source Intelligence)Vulnerability ScannersExploit FrameworksVulnerability AnalysisExploitationInformation GatheringThreat IntelligenceCurated Resources
GitHub0xmarcio/pocindex

pocindex

Search 82,000+ public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub.

Repository anzeigen
1.4k17086vor 1h 19mVon Kitploit geprüft

Beliebteste

Alle anzeigen →

Entdecken Sie die meistgenutzten Tools unserer Community.

Alle Tools erkunden

Durchsuchen Sie unsere Tool-Sammlung

Alle Tools anzeigen →
Teilen
Webseite
Inhalt in der angeforderten Sprache nicht verfügbar. Englische Version wird angezeigt.

PoC Index

last sync CI CVEs with PoCs known exploited stars

Search PoC Index

Just landed

Trending in 2026

Trending in 2025

2024, 2023

Trending in 2024

Data

Every file is plain JSON on the CDN. No key, no rate limit.

root@kitploit:~
# everything the index knows about one CVE
curl -s https://pocindex.io/CVE_list.json \
  | jq '.[] | select(.cve == "CVE-2021-44228") | {cve, poc: (.poc | length), nuclei, msf, edb, vulhub, collections}'

# every published CVSS assessment plus vetted advisory links
curl -s https://pocindex.io/cve_metadata.json | jq '."CVE-2021-44228"'

# likelihood of exploitation in the next 30 days
curl -s https://pocindex.io/epss.json | jq '."CVE-2021-44228"'

# stars and last push for one PoC repository; repository keys are lowercased
curl -s https://pocindex.io/repo_meta.json | jq '."sfewer-r7/cve-2026-55040"'

What CISA says is being exploited, that also has a PoC here, ranked by how likely each is to be used next:

root@kitploit:~
curl -s https://pocindex.io/kev.json  -o kev.json
curl -s https://pocindex.io/epss.json -o epss.json
jq -n --slurpfile kev kev.json --slurpfile epss epss.json \
  '[$kev[0] | keys[] | select($epss[0][.]) | {cve: ., epss: $epss[0][.][0]}]
   | sort_by(-.epss) | .[:10]'

CVSS rows are [version, score, severity, vector, source, assessment type]. Advisory rows are [URL, NVD reference tags].

Sources

Build

Contributing

Missing PoC, wrong link, dead repository: open an issue with the CVE id and the repository URL.

Tool herunterladen
StarsUpdatedRepositoryDescription
1⭐10h agoCVE-2025-7771ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write…
0⭐1d agoKEV CVE-2025-39964In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent…
2⭐2d agoghostlock-cve-2026-43499CVE-2026-43499 (GhostLock) - Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting…
1⭐3d agoCVE-2025-6325_CVE-2025-6327CVE-2025-6325 + CVE-2025-6327 - King Addons for Elementor <= 51.1.36 DUAL EXPLOIT PoC (Unauthenticated…
2⭐3d agoCVE-2026-90817Unauth REDCap RCE (CVE-2026-90817) mass check PoC - requires public survey hash for full validation.
0⭐4d agoCVE-2026-84434PoC for CVE-2026-84434: unauthenticated arbitrary file upload in Gravity Forms ≤3.1.0.4 via hidden File…
2⭐4d agoCVE-2026-89274PoC for CVE-2026-89274: unauthenticated arbitrary shortcode execution in WP Recipe Maker ≤10.8.1 via recipe…
1⭐4d agoFlowise-RCE-CVE-2025-59528Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability…
1⭐4d agoFlowise-CVE-2025-58434-PasswordResetUnauthenticated password reset exploit for Flowise AI ≤ 3.0.5. Abuses the /api/v1/account/forgot-password…
0⭐5d agoCVE-2025-20260First public PoC for CVE-2025-20260 (CVSS 9.8) - a ClamAV PDF-scanning buffer overflow, with core-dump…
StarsUpdatedRepositoryDescription
9⭐3h agoCVE-2026-78306DJI Drone DUML Command Injection over Bluetooth - Proof of Concept for CVE-2026-78306
4⭐13h agoCVE-2026-87902-ToolkitCVE-2026-87902 - WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red/Blue Team suite for WordPress 4.7-7.1.1. / 2…
19⭐15h agoCVE-2026-84543Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability
9⭐23h agoCVE-2026-87902Unauthenticated RCE on Wordpress
5⭐23h agoCVE_2026_87902Exploit pycve_2026_87902_scanner.py /tmp/local.txt --console
27⭐1d agoCVE-2026-87902CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion…
3⭐1d agoCVE-2026-23921This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921
29⭐1d agocve-2026-87902-pocPoC for CVE-2026-87902 - unauthenticated path traversal in WordPress page-template resolution (local PHP…
825⭐2d agoKEV CVE-2026-24061CVE-2026-24061 exploit PoC
23⭐3d agoCVE-2026-43786Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that…
4⭐3d agoCVE-2026-94129A POC for CVE-2026-94129
4⭐3d agoCVE-2026-94128POC for CVE-2026-94128
3⭐3d agoCVE-2026-88854CVE-2026-88854 - OrdaSoft Joomla Gallery unauth SQLi PoC (check / mass scan / EXTRACTVALUE read)
6⭐3d agoCVE-2026-28609-matroska-pcm-oobProof-of-concept and instrumented reproduction harness for CVE-2026-28609, an out-of-bounds write in…
4⭐4d agoCVE-2026-93958D-Link R95 (BE9500) DHMAPI SetTimeSettings command injection -> root RCE PoC (CVE-2026-93958); for authorized…
5⭐4d agoCVE-2026-92229CVE-2026-92229 - Forminator ≤1.57.2 unauth shortcode exec (current_url / quiz AJAX). Python 3 PoC.
3⭐4d agoCVE-2026-81294CVE-2026-81294 - WordPress - Paul Ryan - Critical 9.8 - Unauthenticated GET /wp-login.php?external=oauth2 -…
3⭐7d agoCVE-2026-55781-pocUnbounded memory allocation in NanaZip's UFS handler via an attacker-controlled fs_bsize field.
16⭐7d agoCVE-2026-83991-writeup-and-pocCVE-2026-83991: Windows Cloud Files access-check bypass
5⭐8d agoCVE-2026-12793CVE-2026-12793 PoC - JetFormBuilder ≤3.6.2 unauth Register User / admin account creation
StarsUpdatedRepositoryDescription
7⭐7d agoKEV CVE-2025-32432-exploit-by-P34NUTReliable CVE-2025-32432 pre-auth RCE exploit for Craft CMS 3.x/4.x/5.x, works where other public PoCs fail
3⭐27d agoKEV CVE-2025-3248-Langflow-RCELangflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A…
7⭐28d agoKEV vivo_iqoo_neo_9_root_research_on_CVE-2025-21479Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of…
6⭐35d agoKEV cve-2025-21479_iqooneo8Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables…
3⭐37d agoKEV vivo_iqoo_neo_9_root_research_on_CVE-2025-21479iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** - 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案
20⭐44d agoCVE-2025-7771ThrottleStop.sys Arbitrary Physical Memory R/W
6⭐49d agoCVE-2025-8045Dirty Pagetable Exploit for CVE-2025-8045
7⭐53d agoKEV SELinux-Permissive-Only-CVE-2025-21479This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the…
4⭐65d agoKEV CVE-2025-32432Exploit, POC for CVE-2025-32432, CraftCMS2Shell
3⭐66d agoCVE-2025-6019-udisks2-XFS-Resize-TOCTOU-Privilege-EscalationCVE-2025-6019: udisks2 XFS Resize TOCTOU Privilege Escalation
4⭐67d agoCVE-2025-64512CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w/ custom payloads
4⭐69d agoKEV CVE-2025-8110-gogs-pocPoC for CVE-2025-8110 - Gogs arbitrary file write via symlink
7⭐78d agoCVE-2025-30065This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It…
4⭐83d agoCVE-2025-69212-PoCOpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M…
3⭐83d agoKEV CVE-2025-57819CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution (RCE)
4⭐88d agoCVE-2025-69212-PoCOpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and…
StarsUpdatedRepositoryDescription
17⭐39d agoCVE-2024-56426A PoC of the CVE-2024-56426 vulnerability.
4⭐40d agoCVE-2024-56426CVE-2024-56426 Exynos9830 Bootrom Exploit - SM-G985F
3⭐56d agoCVE-2024-36104-PoCPoC for CVE-2024-36104 - unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via /%2e/%2e/ view path…

Trending in 2023

StarsUpdatedRepositoryDescription
3⭐59d agoCVE-2023-52076-PoCPoC exploit for CVE-2023-52076 - zip-slip path traversal in Atril/Xreader (MATE/Cinnamon) enabling arbitrary…
6⭐63d agoCVE-2023-36003PoC for CVE-2023-36003: Windows Exploit Security Feature Bypass Vulnerability in Windows Defender.
4⭐78d agoKEV cve-2023-4911-exploit-optimizedPure C exploit for CVE-2023-4911 (Looney Tunables) - x86_64 & aarch64 implementations. Multi-processing…
15⭐81d agoKEV CVE-2023-32315-EXPLOITA PoC exploit for CVE-2023-32315 - Openfire Authentication Bypass
EndpointHolds
CVE_list.jsonEvery CVE with a linked PoC, its description and its poc, nuclei, msf, edb, vulhub and collections links
cve_metadata.jsonNVD CVSS v2.0, v3.0, v3.1 and v4.0 assessments with vectors and vetted advisory links
epss.jsonExploitation probability and percentile, for nearly every CVE indexed
nuclei.jsonTemplate metadata for the CVEs covered by a runnable Nuclei check
kev.jsonCISA known exploited, keyed by CVE id
repo_meta.jsonStars and last push date per PoC repository, keys lowercased
trending_poc.jsonTrending repositories plus index totals
cves/2026/CVE-2026-68138.mdMarkdown copy of one CVE, one directory per year
SourceWhat it contributes
GitHubRepositories naming a CVE, checked for code before they are linked
PoC-in-GitHubHistorical repository candidates, passed through the same code and intent checks
NucleiRunnable templates that exercise the vulnerability
ExploitDBArchived exploits, mapped by their own CVE column
MetasploitModules, best ranked first
VulhubRunnable vulnerable environments and reproduction steps
afrog, Vulnerability, 0day, xrayCVE-specific templates, code and reproduction guides inside multi-CVE repositories
EPSSDaily exploitation probability from FIRST
CISA KEVWhat is being exploited in the wild
NVDCVSS assessments and tagged vendor, third-party, patch and mitigation references
CVE ProgramThe CVE record, publication state and CNA references
JobCadencePicks up
Trending sweephourlyFront-page repositories and prior-hour candidates added to the searchable index
CVE syncdailyNew CVEs, CNA references and recently pushed GitHub repositories for every CVE year
Metadata syncdaily plus weekly full passCVSS, advisories, rejected records and current CISA KEV status
Nuclei syncdailyNew templates and rating changes
Exploit archivesdailyExploitDB, Metasploit and Vulhub mappings
Historical GitHub syncweeklyOlder PoC repositories missed by the recent-push window
Path collection syncweeklyCVE-specific artifacts inside curated multi-CVE repositories
Link auditweeklyRepositories that went dead, dropped from the index