#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended
stmcyber/boobsnailGenerate obfuscated Excel 4.0 XLM macros for red team operations and blue team analysis, with support for multiple infection techniques, formula…
y4er/cve-2020-2883Weblogic coherence.jar RCE
boyan-milanov/ropiumAutomated ROP chain builder that extracts and analyzes gadgets from binaries using semantic queries, supporting X86/X64 architectures with a Python…
horizon3ai/cve-2022-39952Proof-of-concept exploit for CVE-2022-39952 targeting Fortinet FortiNAC. Abuses keyUpload.jsp endpoint for arbitrary file write to deploy cron-based…
jduck/asus-cmdASUS Router infosvr UDP Broadcast root Command Execution
cryptogenic/ps4-6.20-webkit-code-execution-exploitA WebKit exploit using CVE-2018-4441 to obtain RCE on PS4 6.20.
0xrootpls/fritterPolymorphic shellcode generator for in-memory execution of EXE, DLL, .NET, VBScript, and JScript with per-output and per-build randomization for…
orange-cyberdefense/p3-loaderP³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an execution and…
kkent030315/pagetableinjectionCode Injection, Inject malicious payload via pagetables pml4.
jas502n/cve-2018-17182Linux kernel use-after-free (UAF) privilege escalation exploit for CVE-2018-17182, providing root shell access on affected kernels (3.16 to 4.18.8).…
rogue-kdc/cve-2019-0841PoC code for CVE-2019-0841 Privilege Escalation vulnerability
m4sc3r4n0/avoidzAvoidz tool to bypass most A.V softwares
scorpioneslabs/dvsD(COM) V(ulnerability) S(canner) AKA Devious swiss army knife - Lateral movement using DCOM Objects
soledad208/cve-2018-10933CVE-2018-10933 very simple POC
pucarasec/zuthakaOpen-source C2 integration framework providing a unified web interface for managing multiple command-and-control instances, listeners, agents, and…
amberwolfcyber/nachovpnA delicious, but malicious SSL-VPN server 🌮
vlad902/hacking-team-windows-kernel-lpePreviously-0day exploit from the Hacking Team leak, written by Eugene Ching/Qavar.
