#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended
xtr4nge/fruityc2FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web…
l3cr0f/dccwbypassuacWindows 8.1 and 10 UAC bypass abusing WinSxS in "dccw.exe".
icyguider/lightsoutGenerate an obfuscated DLL that will disable AMSI & ETW
cyberstruggle/l4shLog4Shell RCE Exploit - fully independent exploit does not require any 3rd party binaries.
neomaster831/kurasagiWindows 11 24H2-25H2 Runtime PatchGuard Bypass
bhdresh/cve-2017-8759Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test…
kpwnz/def1nit3lyn0taja1lbr3aktoolA jailbreak tool for all arm64 devices on iOS 16.0 to iOS 16.6.1
malvuln/ransomlordRansomLord is a proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise ransomware…
matheus-garbelini/sweyntooth_bluetooth_low_energy_attacksProof of Concept of Sweyntooth Bluetooth Low Energy (BLE) vulnerabilities.
deepinstinct/nofilterAbuses Windows Filtering Platform to launch a console as NT AUTHORITY\SYSTEM or impersonate another logged-on user for privilege escalation during…
skelsec/kerberoastPure-Python toolkit for Kerberos-based attacks including ASREProast, SPNroast, and LDAP enumeration to identify and exploit vulnerable Active…
mazen160/struts-pwn_cve-2017-9805An exploit for Apache Struts CVE-2017-9805
hexway/r00kie-kr00kiePoC exploit for the CVE-2019-15126 kr00k vulnerability
peterpt/eternal_scannerAn internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance)
chompie1337/linux_lpe_ebpf_cve-2021-3490eBPF-based Linux kernel local privilege escalation exploit targeting CVE-2021-3490. Provides root shell access on vulnerable Ubuntu kernels 5.8.0-25…
s3cur3th1ssh1t/sharpnamedpipepthPass the Hash to a named pipe for token Impersonation
seanheelan/o3_finds_cve-2025-37899Artefacts for blog post on finding CVE-2025-37899 with o3
0x27/ciscorv320dumpCVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!
