#1Tools for creating and customizing malicious code or instructions to execute after exploitation.
Kitploit recommended

Windows Remote Post Breach Tool via Telegram
PHP 7 and safe-build Update of the popular C99 variant of PHP Shell.

A Web Vulnerability Scanner and Patcher

Python exploit for CVE-2019-11580, a remote code execution vulnerability in Atlassian Crowd and Crowd Data Center. Uploads a malicious plugin to…

Swiss army knife Webserver in Golang. Keep simple like the python SimpleHTTPServer but with many features

CVE-2020-14882_ALL综合利用工具,支持命令回显检测、批量命令回显、外置xml无回显命令执行等功能。

A QoL tool to obfuscate shellcode. In the future will be able to chain encoding/encryption/compression methods.

A tool for detect&exploit vmware product log4j(cve-2021-44228) vulnerability.Support VMware HCX/vCenter/NSX/Horizon/vRealize Operations Manager

A tool to generate media files with malicious metadata

💻 ARCH : ARM, ARM64, MIPS, PPC, X86

Beacon Object File implementation of Event Viewer deserialization UAC bypass

Remot3d: is a simple tool created for large pentesters as well as just for the pleasure of defacers to control server by backdoors

A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA server using…

Root your MediaTek device with CVE-2020-0069

AI-assisted research pipeline that extracts HTTP desync techniques, generates malformed request test-cases, validates them via Burp, and confirms…

Web Backdoor Cookie Script-Kit

Nmap NSE script for detecting Apache Log4j RCE (CVE-2021-44228) by injecting JNDI exploit payloads via HTTP headers or TCP/UDP sockets across…

POC for RCE using vulnerabilities described in VMSA-2023-0001