#1Fuzz testing, mutation-based, generation-based, and coverage-guided fuzzing tools.
Kitploit recommended
isukasanuj/cve-2026-85769Proof-of-concept exploit for CVE-2026-85769, a heap out-of-bounds read in libtpms TPM 2.0 state deserialization, demonstrating denial of service via…
dinosn/cve-2019-13132-labCVE-2019-13132 — libzmq CURVE INITIATE stack overflow → RCE. Working exploit + Docker lab.
zer1t0/barridoTool to discover paths in web applications
fkshield/cve-2025-5548End-to-end exploitation lab for CVE-2025-5548 (FreeFloat FTP Server stack buffer overflow). Includes static analysis with IDA/Ghidra, binary fuzzing,…
hunt-benito/zephyr-lwm2m-firmware-update-oob-read-cve-2026-10672-truncated-package-uriProof-of-concept exploit for CVE-2026-10672, an out-of-bounds read in Zephyr RTOS LwM2M firmware-update pull client. Includes standalone C…
rat5ak/cve-2026-41285-openbsd-v6daemons-go-brrrOne IPv6 ND option with length zero. One missing check. Daemon walks backward and lives in the loop. Reported to OpenBSD, fixed, CVE assigned.
webdev75950-ux/nginx-rce-cve-2026-42945Proof-of-concept exploit for CVE-2026-42945, a critical heap buffer overflow in NGINX rewrite module enabling remote code execution via crafted URI…
lottiedeyan/cve20265172pocCVE-2026-5172: buffer overflow in extract_addresses() on crafted resource record PoC
vital-information-resource-under-siege/cve-2026-38698-and-cve-2026-38699Technical details and publication about CVE-2026-38698 and CVE-2026-38699
alex-acero-security/cve-2025-20260-pocProof-of-concept exploit for CVE-2025-20260, a buffer overflow in ClamAV's PDF scanning. Includes a Python script to generate a malicious PDF and…
0linear/cve-2026-62958Proof-of-concept for CVE-2026-62958: crafts a malformed ELF to trigger an out-of-bounds read in Libriscv and crash the sandbox with SIGSEGV.
fineman999/poc_cve-2024-36420Local reproduction lab and Nuclei template for CVE-2024-36420, an arbitrary file read vulnerability in Flowise via unsanitized fileName parameter.…
jianrongxiao-linksys/dnsmasq-cve-2026Automated defect verification tool for 6 dnsmasq CVEs (CVE-2026-2291, 4890, 4891, 4892, 4893, 5172)
rishvic/xpdf-dockerDocker images of Xpdf 4.04, vulnerable to CVE-2022-30524
yan5ui/env-cve-2020-8036Aritifacts of docker env of CVE-2020-8036
mateusm1403/poc-cve-2025-8671-madeyoureset-http-2PoC para validar vulnerabilidade MadeYouReset
muhammedhussein17/libheif-cve-2026-50142CVE-2026-50142 — Heap allocation vulnerability in libheif HEIF sequence parser
liaoziqi-gzfls/cve-2026-42945CVE-2026-42945 Nginx Rift
