#1Comprehensive frameworks for exploit development, testing, and execution.
Kitploit recommended

All-Rust Active Directory exploitation framework: LDAP/SMB/Kerberos enumeration, attack-graph pathfinding, Kerberoasting, NTLM relay, ticket forging,…

Proof-of-concept exploit for CVE-2021-4034, a local privilege escalation in polkit's pkexec, demonstrating exploitation with simple C helpers and a…

VM Escape for Parallels Desktop <18.1.1

🛡️ Open-source binary protection toolkit for Windows PE. Nanomite, VM protection, anti-debug, and more.

library and intepreter for penetration testing tools

PAKURI-THON is a tool that supports pentesters with various pentesting tools and C4 server (command & control and chat & communication server).…

CLI wrapper for MSFvenom that streamlines payload creation with profile management, automated listener generation, and organized output for…

CVE-2021-3378 | FortiLogger - Unauthenticated Arbitrary File Upload (Metasploit)

Python exploit for CVE-2020-1472 (Netlogon Elevation of Privilege) targeting domain controllers to achieve full domain compromise.

iOS 12.0 -> 12.1.2 Incomplete Osiris Jailbreak with CVE-2019-6225 by GeoSn0w (FCE365)

An iQOO Z9 5G and vivo T3 5G jailbreak/root CVE-2026-43499 Android application and payloads. Both devices use the MediaTek Dimensity 7200 (MT6886)…

the metasploit script(POC) about CVE-2021-36260

CVE-2026-45250: FreeBSD 14.4 setcred kernel buffer overflow (LPE)

the metasploit script(POC/EXP) about CVE-2021-22005 VMware vCenter Server contains an arbitrary file upload vulnerability

pwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)

RedRoot is a Python-based, CLI-driven offensive security framework that brings essential red teaming tools into one unified terminal environment.…

Files related to the Pwn2Own Toronto 2023 exploit against the Xiaomi 13 Pro.

This is an implementation of the CVE-2020-0796 aka SMBGhost vulnerability, compatible with the Metasploit Framework