#1Fuzz testing, mutation-based, generation-based, and coverage-guided fuzzing tools.
Kitploit recommended
vighnesh91/-logicsentry-aiOffline SAST/DAST triage engine that parses source code and replays HAR traffic to detect business-logic flaws, BOLA, race conditions, and privilege…
abraxas/qemu-colo-l4-oobQEMU 11.1.2 - High - Local/Remote - OOB - COLO filter-rewriter short IPv4 L4 heap overflow
dozermx/argusMulti-phase reconnaissance and attack-surface scanner that maps domains, IPs, ASNs, cloud assets, and CVEs into a knowledge graph with CVSS scoring…
grp-ops/react2shellLightweight scanner and Nuclei templates for identifying React and Next.js deserialization RCEs (CVE-2025-55182 / CVE-2025-66478).
nsbogam/cve-2022-26269Suzuki connect app is used to get the car information like Fuel, Ignition status, Current location, Seat buckle status etc. In Ignis, Zeta variant…
prikalel/django-xss-exampleThis repo reproduce xss attack on django 4.0.1 (see CVE-2022-22818)
quadron-research-lab/kernel_driver_bugs
olafdaf/cve-2022-40363A buffer overflow in the component nfc_device_load_mifare_ul_data of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a…
dwisiswant0/cve-2025-46819Proof-of-concept exploit for CVE-2025-46819, a Redis Lua long-string delimiter out-of-bounds read, demonstrating a crash via malformed input.
runtimeverification/kernel-c-to-rust-spikeHardening kernel C parsers via Rust rewrite + differential fuzzing + formal verification. First target: UVC (CVE-2024-53104).
eslam3kl/meoweyeMeowEye is a real-time scanner for identifying multiple web vulnerabilities in live applications.
hunt-benito/mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rceProof-of-concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek WLAN AP drivers. Uses scapy to send crafted Wi-Fi management…
hasan-khalil/cve-2020-6514Exploit for CVE-2020-6514 targeting WebRTC SCTP memory corruption in Android applications. Uses Frida to hook native functions and alter SCTP packets…
antogit-sys/cve-2018-7449simple Python exploit using CVE-2018-7449 on embOS/IP FTP Server v3.22
cobbbex/cisco-asa-vulnerability-researchSystematic reverse engineering of Cisco ASA's lina binary to discover and analyze memory corruption vulnerabilities, including CVE-2025-20333 and…
ivanesk315/cve-2026-42533Docker lab reproducing CVE-2026-42533, a pre-auth nginx heap overflow and info leak via two-pass capture clobbering, with PoC scripts and patched…
joaovicdev/exploit-cve-2026-22778Proof-of-concept exploit for CVE-2026-22778, an unauthenticated RCE in vLLM's video processing, demonstrating heap address disclosure and a heap…
xpcmdshell/cve-2022-26711Integer overflow in Apple ImageIO WebP parsing (macOS/iOS)
