#1Static and dynamic code analysis, SAST, DAST, and code review tools.
Kitploit recommended
12-test-12/cve-2025-3248Exploit for CVE-2025-3248: injects crafted Python payloads into an unauthenticated API code endpoint to execute arbitrary commands on the target…
ianthinus/cve-2024-4577Proof-of-concept exploit for CVE-2024-4577, a PHP CGI argument injection vulnerability enabling remote code execution via crafted HTTP requests.
vert16x/cve-2023-32571-pocProof-of-concept exploit for CVE-2023-32571 demonstrating Dynamic Linq injection to achieve remote code execution, with a Docker-based lab…
tranphuc2005/cve-2019-3396Step-by-step analysis and exploitation guide for CVE-2019-3396, a critical SSTI vulnerability in Confluence Server & Data Center, including debugging…
shoucheng3/apache__jspwiki_cve-2019-0225_2-11-0-m2Exploit module for Apache JSPWiki CVE-2019-0225, enabling remote code execution via crafted requests. Designed for penetration testing and…
pazeray/cve-2020-17533Proof-of-concept exploit for Apache Struts2 remote code execution vulnerability CVE-2020-17533, leveraging OGNL expression injection for…
mbadanoiu/cve-2025-6384CVE-2025-6384: Groovy Sandbox Bypass 2 in CrafterCMS
fbion/cve-2022-22947Spring Cloud Gateway Actuator API SpEL Code Injection.
d0n601/cve-2025-5961Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload
youssefsalama1/cve-2018-6574Exploit code for CVE-2018-6574, a Go language vulnerability allowing arbitrary code execution via crafted import paths.
syfi/cve-2023-46818Metasploit Modules
bashamega/react-cve-2025-55182-fixerPatches CVE-2025-55182 in your repositories
satheesh575555/external_v8_aosp10_r33_cve-2021-0396Repository containing V8 JavaScript engine source code with a specific commit for CVE-2021-0396, likely for vulnerability research and exploitation.
shoucheng3/asf__commons-text_cve-2022-42889_1-9Java library for string manipulation algorithms, packaged with a proof-of-concept exploit for CVE-2022-42889 to demonstrate and test the…
sa1g0n1337/cve_2013_2186Source code for CVE-2013-2186
shoucheng3/jenkinsci__workflow-cps-global-lib-plugin_cve-2022-25174_544-vff04fa68714dExploit for CVE-2022-25174 in Jenkins Pipeline Shared Libraries plugin, demonstrating code injection via crafted library definitions for security…
atlassian/bitbucket-iac-scanScans Infrastructure as Code files for security misconfigurations and vulnerabilities using KICS, with Bitbucket Code Insights reporting.
mazx0p/cve-2021-21315-exploitsysteminformation
