#1Tools for creating and customizing malicious code or instructions to execute after exploitation.
Kitploit recommended
hood3drob1n/mysql-fu.rbMySQL-Fu is a Ruby based MySQL Client Script I wrote. It does most of the stuff a normal MySQL client might do: SQL Shell, Update/Delete/Drop…
xen0bit/cve-2022-37434_pocu think that it doesnt but it do
n1shant-sinha/cve-2017-0199Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could…
usman0220/cve-2026-33017-langflow-rceCVE-2026-33017 - Langflow < 1.9.0 Unauthenticated RCE PoC
ianxtianxt/ysoserial.netGenerates .NET deserialization payloads for exploiting insecure deserialization vulnerabilities. Aids penetration testers in validating security…
ac8999/cve-2009-3999-hp-power-manager-4.2-build-7-buffer-overflowAutomatic script written in python for CVE-2009-3999
tausifzaman/cve-2026-3844PoC exploit for CVE-2026-3844, a critical unauthenticated file upload vulnerability in the WordPress Breeze plugin leading to RCE.
joshuavanderpoll/cve-2026-44262Unauthenticated RCE in dedoc/scramble — PoC, Nmap NSE & Nuclei template.
shikari00007/atom-cms-2.0---file-upload-remote-code-execution-un-authenticated-pocRemote Code Execution (RCE)
vysecurity/cve-2021-40444Proof-of-concept exploit for CVE-2021-40444, a Microsoft Office remote code execution vulnerability triggered via malicious ActiveX controls in…
duck-sec/cve-2023-41425Python exploit for Wonder CMS XSS-to-RCE (CVE-2023-41425) that serves malicious scripts locally, enabling remote code execution without external…
abbisqq/cve-2023-24610This is a proof of concept for CVE-2023-24610
ungabunga-ctf/cve-2023-26039CVE-2023-26039 - ZoneMinder. Any authenticated user can construct an api command to execute any shell command as the web user.
l41kaa/cve-2023-33733-exploit-pocPython exploit script for CVE-2023-33733 targeting web applications. Automates authentication, session extraction, and reverse shell delivery for…
ihhgimhana/react2shell-cve-2025-55182-poc-reverse-shellThis is an easy to use PoC script to exploit React2Shell-CVE-2025-55182 Nextjs vulnerability. This will help to gain a reverse shell.
cillian-collins/cve-2025-55182A proof of concept exploit script for CVE-2025-55182
h1ng007/cve-2024-3640_wafbypassCVE-2024-3640绕过Waf进行漏洞利用
vickyaryan7/text4shell-exploitPython Script to exploit RCE of CVE-2022-42889
