#1Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.
Kitploit recommended
showy-headteacher114/cve-2025-66398Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.
404godd/cve-2026-20841-poc🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.
wxxsfxyzm/ghostlock-galaxyRoot your Galaxy using CVE-2026-43499
bmax121/kernelpatchPatching and hooking the Linux kernel with only a stripped Linux kernel image.
b3rt1ng/koiMulti-session reverse shell handler with PTY upgrade, post-exploitation modules, Layer 3 tunneling, payload obfuscation for EDR evasion, session…
nullsecuritynet/toolsCurated collection of security tools, exploits, proof-of-concept code, shellcodes, and scripts for penetration testing and educational offensive…
abraxas/spark-python-ds-staticApache Spark 4.2.0 - High - Remote - Privilege leftover - process-global Python Data Source map
abraxas/pfsense-ipsec-login-bannerpfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - IPsec login_banner start-scripts
rapid7/metasploit-payloadsUnified repository for different Metasploit Framework payloads
shaheeryasirofficial/smugglemypayloadGenerates HTML smuggling pages that embed and reconstruct files client-side via JavaScript, with payload encoding, chunking, obfuscation, and…
hamzamalik3461/cve-2026-20841🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.
tc4dy/cve-2026-41940-poc-exploitPoC exploit for CVE-2026-41940 targeting cPanel/WHM authentication bypass via CRLF injection. Supports session hijacking, RCE, reverse shell, mass…
fl0ydsec/cve-2026-63030Python mass exploit and detector for the WordPress Core pre-auth RCE chain CVE-2026-63030 and CVE-2026-60137, chaining SQL injection into remote code…
bmax121/apatchThe patching of Android kernel and Android system
ghxstsec/cve-2025-8110Proof-of-concept exploit for CVE-2025-8110, a Gogs RCE vulnerability exploiting path traversal via symbolic links and sshCommand injection to deliver…
snailsploit/claude-redCurated library of 78 offensive security SKILL.md modules that prime Claude with expert red team methodology across web, AD, wireless, cloud, and…
b23r0/heroinnA cross platform C2/post-exploitation framework.
lyravoid/kernelpatchPatches and hooks the Linux kernel using only a stripped kernel image, extracting symbols and injecting code for inline and syscall hooking on arm64.
