#1Tools for creating and customizing malicious code or instructions to execute after exploitation.
Kitploit recommended
joshbnewton31080/cve-2022-42889-text4shellDocker-based lab environment to reproduce and test the Text4Shell (CVE-2022-42889) remote code execution vulnerability in Apache Commons Text.
josemlwdf/cve-2023-5965Proof-of-concept exploit for authenticated arbitrary PHP code execution in EspoCRM 7.2.5 via malicious zip upload, including a web shell payload.
jongmartinez/-cve-2017-9805-Python exploit script for Apache Struts2 REST Plugin XStream RCE (CVE-2017-9805) enabling remote command execution and reverse shell on vulnerable…
johnjohnsp1/cve-2014-4113PowerShell-based exploit for CVE-2014-4113 targeting x64 Windows systems with remote payload download and execution.
hosch3n/fastjsonvulnsExploit for Fastjson 1.2.80 CVE-2022-25845 enabling AspectJ file read and Groovy remote class loading for RCE.
hoosin/cve-2025-55182Proof-of-concept exploit for CVE-2025-55182, a Next.js RCE vulnerability via insecure deserialization in RSC requests. Includes a Go-based POC script…
jimidk/better-cve-2022-29464Proof-of-concept exploit for CVE-2022-29464 enabling unrestricted file upload and remote code execution on vulnerable WSO2 products, with a custom…
jiansiting/cve-2019-3719Proof-of-concept exploit for CVE-2019-3719, a remote code execution vulnerability in Dell SupportAssist. Executes arbitrary payloads against…
jensnesten/react2shell-pocRCE exploit PoC for CVE-2025-55182 and CVE-2025-66478 in Next.js and React Server Components with scanner and exploitation tools.
jeffreybxu/five-nights-at-follina-sA Fullstack Academy Cybersecurity project examining the full cycle of the Follina (CVE-2022-30190) vulnerability, from exploit to detection and…
jeffli1024/log4j-rce-testQuick test environment for CVE-2021-44228 Log4j RCE vulnerability with a built-in exploit server and customizable payload execution.
jeffbezosispogg/cve-2021-4045TP-Link Tapo c200 ver <1.1.15 - Remote Code Execution (RCE)
jeanchpt/cve-2023-36664Python PoC for CVE-2023-36664 Ghostscript RCE. Injects payloads or reverse shells into .eps files to trigger code execution via LibreOffice Draw.
jduck/cve-2015-1538-1Python exploit for CVE-2015-1538-1 targeting Stagefright's 'stsc' MP4 atom integer overflow to achieve remote code execution and a reverse shell on…
jcarabantes/cve-2022-28590Proof-of-concept exploit for CVE-2022-28590, a remote code execution vulnerability in Pixelimity 1.0. Uploads a webshell via admin-ajax.php for…
jbaines-r7/through_the_wireProof-of-concept exploit for CVE-2022-26134 (OGNL injection in Atlassian Confluence). Provides reverse shell and in-memory file reader for Linux…
jayngng/bludit-cve-2019-17240Bypass bludit mitigation login form and upload malicious to call a rev shell
jasperla/cve-2017-9101Authenticated remote code execution exploit for PlaySMS 1.4 via CSV phonebook upload. Provides single-command and interactive shell modes for…
