#1Tools for creating and customizing malicious code or instructions to execute after exploitation.
Kitploit recommended

Proof-of-concept exploit for Apache Struts2 S2-037 (CVE-2016-4438) remote code execution vulnerability. Includes PoC script and command execution…
st2-046-poc CVE-2017-5638

Python exploit for CVE-2019-15107, an unauthenticated remote code execution vulnerability in Webmin <=1.920 via the password_change.cgi endpoint.

Apache Solr RCE (ENABLE_REMOTE_JMX_OPTS="true")

Atlassian JIRA Template injection vulnerability RCE

php-fpm+Nginx RCE

Apache Solr DataImport Handler RCE

Exploit generator for CVE-2018-15982 (Adobe Flash Player) that produces SWF and HTML files for remote code execution via crafted Flash objects.

Reverse engineering the "A Letter Before Court 4.docx" malicious files exploting cve-2021-40444

Python exploit for CVE-2024-4577 PHP CGI argument injection enabling unauthenticated remote code execution on Windows servers with specific locales.

Unauthenticated RCE Flaw in Rejetto HTTP File Server (CVE-2024-23692)

MS Office and Windows HTML RCE (CVE-2023-36884) - PoC and exploit

Ghostscript command injection vulnerability PoC (CVE-2023-36664)

This repo is a PoC with to exploit CVE-2023-51467 and CVE-2023-49070 preauth RCE vulnerabilities found in Apache OFBiz.

Proof-of-concept exploit for the Log4Shell vulnerability (CVE-2021-44228) in Apache Log4j, demonstrating remote code execution via JNDI injection.

Automated creation of malicious Git repositories to exploit CVE-2018-11235, a remote code execution vulnerability in Git submodules.

This is a python written PoC of a recent vulnerability in a wordpress plugin. More information on that here

Python-based exploit for CVE-2018-2628 targeting Oracle WebLogic Server, providing vulnerability detection and remote shell access via JSP payload…