#1C2 frameworks, redirectors, listeners, and command infrastructure tools.
Kitploit recommended

Reproduction of cve-2024-3400-panos_rce_reproduction
Adtran SR400ac ping Command Injection Remote Code Execution Vulnerability

CVE-2024-9264 Grafana SQL Expressions DuckDB LFI/RCE PoC

PoC for exploiting CVE-2019-2729 on WebLogic

Bash poc for CVE-2022-1609 WordPress Weblizar Backdoor

Kalim backdooe Malware Report

Proof-of-concept exploit for CVE-2025-69212: OS command injection in OpenSTAManager's P7M file processing, enabling authenticated remote code…

CVE-2025-62593 — Ray Unauthenticated RCE Exploit is an unauthenticated remote code execution vulnerability in the Ray distributed AI compute engine.

Proof-of-concept exploit for CVE-2026-19679, an insufficient filename sanitization vulnerability in audit-file upload leading to command injection.…

Proof-of-concept exploit for authenticated command injection in file upload processing, demonstrating two-step chain via REST API with blind timing…

CVE-2026-4480

Nuclei Template CVE-2025–24813

Automated exploit for CVE-2025-69212 command injection in OpenSTAManager, featuring admin authentication, malicious ZIP upload, and reverse shell or…

Python exploit for CVE-2022-36804, enabling remote command execution and file transfer on vulnerable Bitbucket Server/Data Center via crafted archive…

Source code minh họa máy chủ c2 demo kịch bản thực thi của CVE-2024-23700

Unauthenticated OS command injection exploit for GPT-SoVITS Gradio web UI. Delivers RCE via unsanitized path parameters in audio-processing helpers,…

CVE-2020–7961 Mass exploit for Script Kiddies

Python proof-of-concept for CVE-2022-25765, a command injection vulnerability in pdfkit, enabling remote code execution via crafted PDF generation.