#1Tools for creating and customizing malicious code or instructions to execute after exploitation.
Kitploit recommended
anonstorks/cve-2025-0282-full-version# CVE-2025-0282: Remote Code Execution Vulnerability in [StorkS]
chiefyoru/exploit-cve-2026-56705CVE-2026-56705 — Adminer < 5.4.3 Unauthenticated RCE via MSSQL PDO DSN Injection
george0papasotiriou/cve-2026-23001-hugging-face-transformers-model-deserialization-arbitrary-code-via-pickle-Proof-of-concept for CVE-2026-23001: demonstrates RCE through unsafe pickle deserialization in Hugging Face Transformers by crafting a malicious…
garlic-wizard/cve-2026-33937-for-darkzeroreturnsthis is a poc for CVE-2026-33937
mehdichyhab/cve-2025-64512-exploitCVE-2025-64512 - pdfminer.six Remote Code Execution Exploit
gunzf0x/issabel-pbx-4.0.0-rce-authenticatedIssabel PBX 4.0.0 Remote Code Execution (Authenticated) - CVE-2024-0986
p1ckzi/cve-2017-9841phpunit-shell | CVE_2017-9841
pflegusch/cve-2022-24637Open Web Analytics 1.7.3 - Remote Code Execution
lemmyz4n3771/cve-2022-22963-pocCVE-2022-22963 RCE PoC in python
duck-sec/cve-2023-41425Python exploit for Wonder CMS XSS-to-RCE (CVE-2023-41425) that serves malicious scripts locally, enabling remote code execution without external…
abbisqq/cve-2023-24610This is a proof of concept for CVE-2023-24610
realstatus/cve-2026-47858Proof-of-concept exploit for unauthenticated JMX RCE in Spring Tools live information mode, using MLet remote class loading to execute arbitrary…
randallbanner/spring-cloud-function-vulnerability-cve-2022-22963-rcePython exploit for CVE-2022-22963 (Spring4Shell) targeting Spring Cloud Function RCE. Automates reverse shell delivery via wget and bash one-liner…
l0n3rs/cve-2021-25641Exploit for CVE-2021-25641 targeting Apache Dubbo RCE vulnerability in versions 2.5.x to 2.7.8. Packaged standalone JAR for direct deployment against…
nxploited/cve-2025-10041Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload
ianxtianxt/thinkphp5.0.1-automatic-getshellthinkphp5.0.1自动getshell脚本
hd-exe/cve-2009-2265-fixfix for not working exploit script on exploitdb (50057.py)
jenderal92/cve-2026-49049Mass vulnerability scanner for CVE-2026-49049 – Unauthenticated Remote Code Execution in Joomla Helix3 plugin. Multi‑threaded, detects both executed…
