#1Tools for creating and customizing malicious code or instructions to execute after exploitation.
Kitploit recommended
superzerosec/cve-2022-29464CVE-2022-29464 POC exploit
shiyeshu/cve-2022-39952_webshellWrite Behinder_webshell to target using CVE-2022-39952
orangmuda/cve-2018-15961CVE-2018-15961 — ᴀᴅᴏʙᴇ ᴄᴏʟᴅғᴜsɪᴏɴ (ʀᴄᴇ)
mrpentst/cve-2023-46604Exploit for CVE-2023-46604
gquere/cve-2020-6364Remote code execution in CA APM Team Center (Wily Introscope)
brosck/cve-2022-4944「💥」CVE-2022-4944: KodExplorer <= 4.49 - CSRF to Arbitrary File Upload
arozx/cve-2022-30190A very simple MSDT "Follina" exploit **patched**
trungnguyen1909/cve-2019-8781-macosExploit POC for the bug CVE-2019-8781, found by @LinusHenze
safarchand/cve-2024-25641PoC for CVE-2024-25641 Authenticated RCE on Cacti v1.2.26
yangyanglo/cve-2024-53677Proof-of-concept exploit for CVE-2024-53677 (S2-067), an Apache Struts2 file upload logic bypass enabling remote code execution via crafted filename…
hu3sky/cve-2020-2555Proof-of-concept exploit for CVE-2020-2555, demonstrating remote code execution via deserialization in Oracle WebLogic Server.
sunqiz/cve-2017-0199-reprofuctionCVE-2017-0199复现
manturever/xworm-rat⭐️The famous XWorm RAT, version 2.1. Educational purposes only
asal1n/cve-2025-24813simple exp for CVE-2025-24813
mbanyamer/cve-2026-25916-roundcube-webmail-dom-based-xss-exploit-via-svg-href-attributePython exploit for Roundcube Webmail DOM-based XSS (CVE-2026-25916) via SVG href attributes, enabling session hijacking and data exfiltration through…
s-index/cve-2021-43811awslabs/sockeye Code injection via unsafe YAML loading CVE-2021-43811
izzz0/cve-2023-27372-pocPython proof-of-concept for detecting CVE-2023-27372 in SPIP CMS. Scans single or multiple URLs for the vulnerability and outputs results to terminal…
afaq1337/cve-2022-36200CVE-2022-36200 PoC
