#1Comprehensive frameworks for exploit development, testing, and execution.
Kitploit recommended
almorabea/pkexec-exploitpwnkit: Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)
agampreet-singh/redrootRedRoot is a Python-based, CLI-driven offensive security framework that brings essential red teaming tools into one unified terminal environment.…
yogehi/cve-2024-4406-xiaomi13pro-exploit-filesFiles related to the Pwn2Own Toronto 2023 exploit against the Xiaomi 13 Pro.
almorabea/smbghost-lpe-metasploit-moduleThis is an implementation of the CVE-2020-0796 aka SMBGhost vulnerability, compatible with the Metasploit Framework
ssrsec/cve-2020-11651-cve-2020-11652-expCVE-2020-11651&&CVE-2020-11652 EXP
impost0r/rieKernel exploit for CVE-2026-43724 targeting Apple macOS/iOS systems. Provides proof-of-concept code for the disclosed vulnerability.
c3c/cve-2021-4034Precompiled multi-architecture exploit for CVE-2021-4034 (pkexec LPE) that drops a shared object to gain root privileges, with build scripts for…
nccgroup/daprDriver Attack Platform for Linux
mauricelambert/cve-2022-21907CVE-2022-21907: detection, protection, exploitation and demonstration. Exploitation: Powershell, Python, Ruby, NMAP and Metasploit. Detection and…
ck00004/cve-2021-4034Exploit for CVE-2021-4034 (pkexec) targeting CentOS 8, allowing custom command execution via modified pwnkit-dry-run.c. Includes compilation and…
akucybersec/cve-2022-1329-wordpress-elementor-3.6.0-3.6.1-3.6.2-remote-code-execution-exploitExploit for CVE-2022-1329, a WordPress Elementor plugin RCE vulnerability, allowing authenticated users to upload and execute arbitrary PHP files via…
themmokhtar/cve-2020-0022A fully public exploit of the CVE-2020-0022 BlueFrag Android RCE Vulnerability (tested on Pixel 3 XL)
f1tz/cve-2020-0796-lpe-expCompiled Windows SMBv3 local privilege escalation exploit targeting CVE-2020-0796 (SMBGhost). Tested on x64 Win10 1909.
nanabingies/cve-2021-21551Dell Driver EoP (CVE-2021-21551)
ajutamangdev/hatiyarModular penetration testing framework with a Metasploit-like interactive shell, pre-built CVE exploit modules, and cloud/network reconnaissance…
folks-iwd/cve-2025-24071-msfvenomMetasploit module for CVE-2025-24071 - Windows NTLM Hash Leak via .library-ms
aemmitt-ns/skeletonZero-click remote code execution exploit for CVE-2021-0326 targeting Android devices, including the Peloton Bike, with a proof-of-concept requiring…
kpn-ciso/dra_writeupWriteup of the Oracle DSR stack buffer overflow vulnerability (DRA) CVE-2014-6598
