#1Custom payload crafting, obfuscation, AV evasion, and delivery mechanism tools.
Kitploit recommended
shlln/cve-2026-90847Proof-of-concept for CVE-2026-90847, an authenticated RCE in iux_set.cgi via malicious .cfg tar upload that writes commands into crontab for…
kitsune-de/stealth_callHeader-only Windows x64 indirect syscall library. Zero CRT, zero IAT, VEH anti-BP, AMSI/ETW bypass, W^X memory, per-call dynamic stubs.
jelasin/cve-2026-42945Proof-of-concept exploit for CVE-2026-42945, a heap buffer overflow in NGINX's rewrite module enabling unauthenticated remote code execution via…
akash0x00/zoneminder-1.29-1.30-rce-exploitUnauthenticated SQL injection to RCE exploit for ZoneMinder 1.29/1.30 (CVE-2016-10204, EDB-41239). Single-command SQLi to webshell to reverse shell…
industri4l-h3ll-xpl0it3rs/cve-2026-33017-langflow-rceCVE-2026-33017 Exploit | by infrar3d
bardlaudian/cve-2024-37054Proof-of-concept that poisons MLflow registered models via the REST API, embedding a malicious pickle to trigger RCE when the model is loaded.
haitam-lazaar/libextractor-privescProof-of-concept for CVE-2026-100310, a local privilege escalation in GNU libextractor ≤1.15 via the LIBEXTRACTOR_PREFIX untrusted search path, with…
tralsesec/cve-2023-20052Original standalone Proof-of-Concept exploit and execution harness for CVE-2023-20052 (ClamAV DMG XML Entity Expansion).
ull0a/msrmapperManual kernel driver mapper for Windows x64 that abuses CVE-2025-8061 in Lenovo's LnvMSRIO.sys to perform a BYOVD attack, mapping PE64 drivers into…
murataydemir/cve-2021-22123[CVE-2021-22123] Fortinet FortiWeb Authenticated OS Command Injection
ish3ng0m4/cve-2026-38526-krayincrmAuthenticated Arbitrary File Upload leading to Remote Code Execution Technical analysis and controlled reproduction of CVE-2026-38526 in Webkul…
bardlaudian/cve-2018-9276CVE-2018-9276 — PRTG Network Monitor < 18.2.39 Authenticated RCE. For educational purposes and authorized penetration testing only.
symbolexe/cve-2024-6387SSH Exploit for CVE-2024-6387 : RCE in OpenSSH's server, on glibc-based Linux systems
bombobombone/cve-2026-103441Local proof-of-concept and sanitized report for CVE-2026-103441, a PHP object-injection flaw in the MediaWiki action=parse API that can reach RCE via…
g4sp4rcs/cve-2019-11707-from-an-ionmonkey-type-confusion-to-system-Windows proof-of-concept exploit chain for CVE-2019-11707, a Firefox IonMonkey type confusion, combining browser RCE with sandbox escape to achieve…
norrismw/cve-2020-9047Python exploit for CVE-2020-9047 targeting exacqVision Web Service. Supports Windows/Linux payload delivery, remote command execution, and…
pwnhacker0x18/ios-kernel-crashExploit for CVE-2018-4407-Memory Corruption
doublemice/cve-2018-4013TALOS-2018-0684/cve-2018-4013 poc
