#1Tools for maintaining long-term access to compromised systems, even after reboots.
Kitploit recommended
cerberusmrxi/flowise-cve-2026-58057-exploitFlowise Windows RCE exploit for CVE-2026-58057. Bypasses environment variable validation via case-sensitive flaw. Uses node_options to inject…
valentineus/hp-slate7-root-kitHP Slate 7 2800 Android 4.1.1 rooting kit using CVE-2015-1805.
themalwareguardian/cve-2022-34301Demonstrates CVE-2022-34301 Secure Boot bypass via Eurosoft signed UEFI Shell (esdiags.efi), using the mm command to nullify gSecurity2 and load…
themalwareguardian/cve-2026-25250Analysis and exploit for CVE-2026-25250, a Secure Boot bypass in Horizon DataSys Reboot Restore where shdloader.efi loads Shield.efi without…
e4zyy/project-cve-2026-33017CVE-2026-33017 - Langflow Unauthenticated RCE Exploit
pexlexity/winrar-cve-2025-8088-path-traversal-pocProof-of-Concept for CVE-2025-8088 vulnerability in WinRAR (path traversal via ADS)
kaandemir993/redline-stealer-c2-defender-bypass-payload-analysis"Reverse engineering analysis of RedLine Stealer, a .NET-based info-stealer that uses C2 domains (198.46.86.63, tempuri.org), Windows Defender…
al1ex/extensionhijackExtensionHijack
eh-amish/windows-defender-security-auditor-cve-2026-50656-Read-only PowerShell security auditor for Windows endpoints and servers: checks Defender configuration, patch status, credentials, persistence,…
mr-zapi/cve-2024-54085Just poc for CVE 2024-54085
undefined-name12/cve-2025-8088-winrarHerramienta avanzada de explotación transversal de ruta de WinRAR para CVE-2025-8088
zorvithonleo/exploit-cve-2014-4210-Exploit for CVE-2014-4210 targeting WebLogic deserialization, with post-exploitation features including ransomware deployment, C2 integration, and…
layer-6/cve-2026-5027-langflowMulti-CVE exploit tool for pre-auth remote code execution on Ivanti Sentry and FortiSandbox. Features interactive shell, webshell deployment,…
nu11secur1ty/0Exploit for a Windows Defender race condition that escalates to SYSTEM via use-after-free, crashes MsMpEng.exe, spawns a hidden shell, and persists…
voidgguy/lenovo-a1000g-mt8317-a412_01_09_130907-kernel-3.4.0-root-cve-2016-5195[AI-assisted] Root method for Lenovo IdeaTab A1000G (MT8317, kernel 3.4.0, Android 4.1) via CVE-2016-5195 (Dirty COW)
its1zero/cve-2025-57819-exploitPython exploit for CVE-2025-57819 targeting FreePBX via unauthenticated SQL injection to achieve remote code execution with automatic reverse shell…
1neptune/chimeraRust-based DLL hijacking loader for MobaXterm (CVE-2026-6421) with persistence
al1ex/powershell-c2Powershell-C2
