#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
george0papasotiriou/cve-2026-5555-container-escape-via-proc-self-fd-symlink-in-shared-volumeProof-of-concept exploit for CVE-2026-5555, demonstrating container escape via /proc/self/fd symlink in rshared volumes to overwrite host files and…
sandraschi/copy-fail-mcpCVE-2026-31431 Copy Fail — Linux kernel LPE tester via MCP
nuky-alt/cve-2025-8088Proof-of-concept exploit and technical analysis for a WinRAR path traversal vulnerability enabling code execution via crafted archives with binary…
p1rat3r00t/why-so-serious-samPoC malware that uses exploit CVE-2021-36934 (improper ACLs on shadow copies) using a fileless red team method on Windows 10/11 with LOLBins,…
mr-alperen/cve-2025-32463Proof-of-concept exploit for CVE-2025-32463, a local privilege escalation in sudo 1.9.14-1.9.17 via chroot misconfiguration and malicious NSS library…
ez4rd1x1/cve-2026-8181Proof-of-concept exploit for CVE-2026-8181, an authentication bypass in the Burst Statistics WordPress plugin. Demonstrates remote, unauthenticated…
prabeershakya/cve-2022-0185-pocProof-of-concept exploit for CVE-2022-0185, a Linux kernel heap buffer overflow enabling local privilege escalation and container escape via FUSE and…
opsecramdan/react2shell-cve-2025-55182Automated exploitation framework for CVE-2025-55182 (Next.js RCE) with subdomain enumeration, vulnerability scanning, payload generation, and…
kuniyal08/copy-fail-cve-2026-31431-labReproduced the fileless LPE CVE‑2026‑31431 (“Copy Fail”) on Kali Linux, then built auditd, Sigma & YARA detections to catch this stealthy kernel…
fazaroot/cve-2025-2539---file-away-wordpress-plugin-arbitrary-file-readAuthenticated arbitrary file read exploit for the File Away WordPress plugin (CVE-2025-2539). Includes PoC, attack flow, detection signatures, and…
damariion/cve-2015-8522.rceExploit for CVE-2015-8522 targeting Tivoli FastBack Server with stack-based buffer overflow, ASLR/DEP bypass, and automated reverse-shell…
rinaliyeva/metasploitable2-vsftpd-exploitationProject: vsFTPd 2.3.4 backdoor exploitation (CVE-2011-2523) on Metasploitable 2.
clearlotus-git/cve-2026-4480-pocProof-of-concept for CVE-2026-4480, a Samba print job name command injection vulnerability. Demonstrates exploitation via malicious print job names…
fl0ydsec/cve-2026-63030Python mass exploit and detector for the WordPress Core pre-auth RCE chain CVE-2026-63030 and CVE-2026-60137, chaining SQL injection into remote code…
0xf9b6a41ec/cve-2026-69328Windows privilege escalation exploit that plants SprintCSP.dll in a user-writable HKLM PATH directory to hijack StorSvc and execute as SYSTEM.
themalwareguardian/cve-2022-34301Demonstrates CVE-2022-34301 Secure Boot bypass via Eurosoft signed UEFI Shell (esdiags.efi), using the mm command to nullify gSecurity2 and load…
karollooool/cve-2026-83991-writeup-and-pocProof-of-concept demonstrating a Windows Cloud Files access-check bypass (CVE-2026-83991) that converts a read-only file into a cloud placeholder via…
cwjchoi01/cve-2026-31321Proof-of-concept demonstrating methods to disable or bypass Windows Defender by hiding, locking, or protecting its folders, enabling persistence…
