#1Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.
Kitploit recommended

A PoC for CVE-2024-3660. Arbitrary Code Execution in Keras.
Super elite end-to-end implant 0day. Full kill-chain. Exploit, escalate, pivot, poison, persistence.

7-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap

Nim-based proof-of-concept for CVE-2021-4034 (PwnKit), a local privilege escalation in polkit's pkexec, with embedded payload library for standalone…

Advisory and proof of concept for CVE-2019-12180, demonstrating arbitrary Groovy code execution in SoapUI and ReadyAPI via malicious project files.

Elite exploitation toolkit for CVE-2025-55182 (React Server Components RCE). Async polymorphic payloads, advanced WAF/CDN bypass, proxy rotation,…

Proof-of-concept exploit for CVE-2024-37759, a SpEL injection vulnerability in DataGear 5.0.0 and earlier enabling remote code execution via crafted…

ATTACK PoC - PHP CVE-2024-4577

POC for ImageMagick 6.9.6-4. This is a POC which was inspired by fullwaywang discovery of CVE-2023-34152.

Proof-of-concept exploit for CVE-2025-32433 with simulated and real attack modes, including a Flask-based C2 server for reverse shell callbacks and…

poc for CVE-2024-45383

Python exploit for CVE-2019-11043 targeting PHP-FPM buffer underflow to achieve remote code execution via null byte overwrite and FastCGI variable…

A repository that contains all the working PoC I have crafted for known CVEs, and details on any ongoing research I am currently doing (mostly Iot…

Exploits WordPress pre-auth XSS (CVE-2026-64638) to achieve remote code execution, installing an AES-encrypted backdoor webshell with persistence,…

Fixed exploit for CVE-2022-24637 enabling reliable exploitation of the identified vulnerability for penetration testing and security assessment…

CVE-2020-28502 node-XMLHttpRequest RCE

Log4J Exploits for Different Systems

Helakuru Version 1.1 DLL Hijack - CVE-2024-48605