#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended
oopnv70-lab/ghostlock-honor-aakGhostLock (CVE-2026-43499) exploit adapted for Honor AAK-AN00 (MagicOS 10, kernel 6.6.89-android15)。无限期停止更新。
spbavarva/cve-2025-46203PoC of CVE-2025-46203
prettyrecon/cve-2021-26084_confluenceCVE-2021-26084 - Confluence Pre-Auth RCE OGNL injection 回显
jet-pentest/cve-2021-3131Proof-of-concept for CVE-2021-3131: credential disclosure via base64-encoded credentials in URL parameter of 1C:Enterprise 8 web server.
imbas007/cve-2025-25257Python-based exploit tool for CVE-2025-25257 in FortiWeb. Automates SQL injection detection, webshell upload, and remote command execution on…
grecosamuel/cve-2024-32002Proof-of-concept exploit for CVE-2024-32002, demonstrating RCE via git clone with malicious submodules and symlinks on case-insensitive filesystems.
edxsh/cve-2019-1221Proof-of-concept exploit for CVE-2019-1221 targeting Internet Explorer 11 32-bit on Windows 10 x64 up to RS5, using VBScript.Encode and CVE-2019-0768…
asterite3/cve-2020-13640CVE-2020-13640 - SQL injection in wpDiscuz WordPress plugin <= 5.3.5
salehlardhi/cve-2024-24919Nuclei template to detect CVE-2024-24919 by checking for /etc/shadow file leakage, enabling automated vulnerability scanning and security assessment.
george0papasotiriou/cve-2026-22017-firmware-update-via-ble-without-authenticationSimulated BLE peripheral exposing an unauthenticated GATT firmware-update characteristic; demonstrates critical CVE-2026-22017 device-takeover…
d0n601/pwncityInsecure TeamCity CI environment for hands-on penetration testing training: reconnaissance, credential theft, privilege escalation, and lateral…
oguz-kagan-akar/cve-2026-41940-analysisTechnical analysis of the cPanel/WHM auth bypass
mauzy0x00/velociraptor_cve-2025-6264_pocProof-of-concept exploit for CVE-2025-6264 in Velociraptor, demonstrating privilege escalation via missing permission checks to redirect clients to a…
shoucheng3/apache__sling-org-apache-sling-servlets-resolver_cve-2024-23673_2-10-0Analysis and exploitation code for CVE-2024-23673, a vulnerability in Apache Sling Servlet Resolver, enabling targeted security testing of…
seqred-s-a/cve-2020-29007Remote code execution in Mediawiki Score
grampae/cve-2019-16889-pocProof of conecept for CVE-2019-16889 (Resource consumption on Ubiquiti Edgemax 1.10.6 and earlier
duckzsc2/cve-2018-6574-pocProof-of-concept exploit for CVE-2018-6574, a remote code execution vulnerability in Go's 'go get' command. Demonstrates exploitation via malicious…
