#1Comprehensive frameworks for exploit development, testing, and execution.
Kitploit recommended

Rust-based User-Defined Reflective Loader for Cobalt Strike payloads. Avoids RWX memory pages for OPSEC safety. Includes an extractor tool for loader…

Framework for generating shellcode and exploit payloads, designed for penetration testing and security research to automate payload creation and…

Proof-of-concept validation harness for Electron boundary hardening, modeling renderer/main-process isolation, IPC policy enforcement, and navigation…

CVE-2021-1732 local privilege escalation exploit for Windows 10, with research and proof-of-concept code targeting kernel-mode vulnerabilities.

Proof-of-concept exploit for CVE-2023-29336, a Win32k elevation of privilege vulnerability enabling SYSTEM-level access on affected Windows systems.

Autonomous multi-agent AI penetration-testing engine: a governed tool sandbox, an immutable evidence-and-validation gate, and a reproducible…

Metasploit module for CVE-2019-0708 (BlueKeep) - https://github.com/rapid7/metasploit-framework/tree/5a0119b04309c8e61b44763ac08811cd3ecbbf8d/modules/…

exploit for CVE-2012-4220 working on zte-open

CVE-2026-31431 (Copy Fail) PoC - Linux kernel page cache corruption via authencesn AF_ALG + splice()

GhostLock CVE-2026-43499 port for Galaxy Z Fold 8 (h8q)

CVE-2025-21479 PoC for ZFlip5 with Knox in the way!(˶˃ ᵕ ˂˶)

PoC for the Untrusted Pointer Dereference in the ks.sys driver

Metasploit module for massive Denial of Service using #Bluekeep vector.

Automated Scanning, Pentesting , Exploiting and Reporting

Cobalt Strike 4.4 猪猪版 去暗桩 去流量特征 beacon仿造真实API服务 修补CVE-2022-39197补丁

Exploit for CVE-2025-37947 in ksmbd, a Linux kernel SMB server, causing an out-of-bounds write. Includes BPF tracer, QEMU setup, and minimal PoC…

CEREBRO-RED v2: Advanced LLM Red Team Research Platform with PAIR Algorithm and LLM-as-a-Judge Evaluation

Read only mirror - No pull requests