#1Comprehensive frameworks for exploit development, testing, and execution.
Kitploit recommended
nirvanaon/nowNØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.
mtjailed/unjailmeA sandbox escape based on the proof-of-concept (CVE-2018-4087) by Rani Idan (Zimperium)
rsmudge/cve-2020-0796-bofCobalt Strike Beacon Object File implementing CVE-2020-0796 SMBGhost local privilege escalation with dual weaponization paths for token theft and…
icyguider/nimcryptPE Crypter written in Nim
j4nn/cve-2020-0041Local privilege escalation exploit for Android kernel vulnerability CVE-2020-0041, with portability across devices and kernel versions.
1n3/attacksurfacemanagementDiscover the attack surface and prioritize risks with our continuous Attack Surface Management (ASM) platform - Sn1per Professional #pentest #redteam…
calfcrusher/maccaronic2A proof-of-concept Command & Control framework that utilizes the powerful AsyncSSH Python library which provides an asynchronous client and server…
j-0-t/staekkaStækka Metasploit - Extenting Metasploit
duriantaco/ravageEvidence first autonomous web security testing for controlled, authorized targets. With reproducible labs, audit trails, reports, and XBEN…
michalbednarski/thisseemswrongWriteup and exploit for CVE-2024-49746: Android's Parcel::continueWrite closing File Descriptors that are later used
lorentzenman/paydayPayload generator that uses Metasploit and Veil. Takes IP address as input and calls Veil. Use msfvenom to create payloads and writes resource…
stillbigjosh/adaptix-serverless-c2Serverless C2 transport plugin for AdaptixC2 v1.2 using AWS Lambda + DynamoDB as the relay infrastructure.
lanleft/cve-2023-1829Linux kernel local privilege escalation exploit for CVE-2023-1829, targeting Ubuntu 22.04 with netfilter filter functions. Includes build…
professionallyevil/c4Cyberdelia, a Collection of Command and Control frameworks
jas502n/msfconsole-termuxHow To Install Metasploit-Table on the Android Termux
bazad/launchd-portrepCVE-2018-4280: Mach port replacement vulnerability in launchd on macOS 10.13.5 leading to local privilege escalation and SIP bypass.
34zy/microsoft-office-word-mshtml-remote-code-execution-exploitExploits CVE-2021-40444 in Microsoft Office Word to achieve remote code execution through the MSHTML engine by injecting malicious content into a…
nhh9905/cve-2026-62735Proof-of-concept for CVE-2026-62735, an integer overflow in http.sys leading to heap overflow and SYSTEM shell. Includes crash log and stack trace…
