#1Tools for exploring and expanding control within compromised networks by moving between systems.
Kitploit recommended
shanfenglan/cve-2020-1472Exploit for CVE-2020-1472 (Zerologon) that resets domain controller machine account password, enabling credential dumping and privilege escalation to…
cybersecplayground/cve-2024-48887-fortiswitch-exploita lightweight JavaScript snippet showcasing how unauthorized password changes can be triggered on vulnerable Fortinet FortiSwitch GUI endpoints.
ctabango/cve-2025-24071_pocextraProof-of-concept exploit for CVE-2025-24071 that creates a .searchconnector-ms file to trigger SMB authentication when copied, enabling credential…
zorvithonleo/exploit-cve-2014-4210-Exploit for CVE-2014-4210 targeting WebLogic deserialization, with post-exploitation features including ransomware deployment, C2 integration, and…
pswalia2u/cve-2025-24071_pocRust-based proof-of-concept that generates Windows Library (.library-ms) files with configurable network paths to demonstrate CVE-2025-24071 NTLM…
wrathfuldiety/zerologonzerologon script to exploit CVE-2020-1472 CVSS 10/10
nu11secur1ty/metasploit-framework-nu11secur1tyExtending of metasploit-framework
jiushill/cve-2020-1472Python exploit for CVE-2020-1472 (Zerologon) targeting Netlogon authentication bypass to escalate privileges and compromise Active Directory domain…
clearlotus-git/cve-2026-4480-pocProof-of-concept for CVE-2026-4480, a Samba print job name command injection vulnerability. Demonstrates exploitation via malicious print job names…
solarlynxsqueeze/cve-2026-32202Generates malicious LNK files to coerce Net-NTLMv2 hashes via Windows Shell UNC handling, with custom SMB listener and relay integration for…
anach-ai/cve-2026-41940CVE-2026-41940 — cPanel/WHM Auth Bypass By Dr.Anach, CRLF injection in `cpsrvd` Basic auth handler → unauthenticated WHM API access → RCE as root.…
dhananjayasj/cve-2024-21413-microsoft-outlook-remote-code-execution-vulnerabilityProof-of-concept exploit for CVE-2024-21413, a critical Outlook RCE vulnerability that leaks NetNTLMv2 hashes via crafted file:// links, enabling…
0xdak/cve-2026-44881_exploitSingle-script exploit for CVE-2026-44881 that chains .git credential leakage, Portainer Git-symlink injection, arbitrary host file read, and SSH…
c0gnit00/cve-2025-9074PHP poc, exploit for CVE-2025-9074
michaeladamgroberman/cve-2026-13768CVE-2026-13768: Privileged iothubowner IoT Hub credential — fleet enumeration, device RCE, home-network pivot — Gardyn (ICSA-26-183-03)
ash1996x/cve-2025-50154-aggressor-scriptCobalt Strike Aggressor script that weaponizes LNK and Library-MS files to trigger SMB NTLMv2 hash disclosure, including CVE-2025-24054 bypass, for…
tomadimitrie/cve-2026-54424Exploiting Parsec for Windows to gain SYSTEM privileges
