#1Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
Kitploit recommended
razureink/fuckerPenetration testing framework with AI-driven decision engine
khalilu020/offensive-security-adversary-emulationSimulated a real-world attack (CVE-2011-2523) against a vulnerable host, then cross-checked detection coverage against an existing…
777erp/cve-2026-49176_bofCVE-2026-49176 WalletService LPE — standalone PoC + Cobalt Strike BOF (SYSTEM command on interactive session)
sandraschi/copy-fail-mcpCVE-2026-31431 Copy Fail — Linux kernel LPE tester via MCP
tc4dy/cve-2026-61511-poc-exploitCVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full…
sweatyrocket/huawei-p10-cve-2017-8890-unlockHuawei P10 VTR-L29C432B151 CVE-2017-8890 exploit research and bootloader-unlock journey
alihzsec/cve-2024-28000Hands-on exploit lab for CVE-2024-28000 — unauthenticated privilege escalation in LiteSpeed Cache (WordPress plugin, <=6.3.0.1). Spins up a…
litosmartin/cve-2026-64600-refluxfs-pocA POC for the recently discovered Qualys bug on COW with XFS
tomerpeled92/cveCurated repository of CVEs with PoCs, articles, and detailed descriptions for vulnerability research and exploitation.
gabrielha12/termix-researchCVE-2026-45746, CVE-2026-45750, CVE-2026-53547 — three critical vulnerabilities in Termix: cross-tenant session hijacking, OS command injection, and…
redteambrasil/cve-2020-24028PoC for CVE-2020-24028: privilege escalation via authenticated permission bypass in ForLogic Qualiex, allowing user creation and password changes.
redteambrasil/cve-2020-24029Detailed disclosure of an unauthenticated password change vulnerability in ForLogic Qualiex v1 and v3, enabling remote privilege escalation and…
redteambrasil/cve-2020-24030Disclosure of CVE-2020-24030: weak token expiration in ForLogic Qualiex enabling remote privilege escalation and sensitive data access through token…
synacktiv/nord-streamNord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports…
woshimaniubi8/cve-2026-43499-root-kernelsu基于内核漏洞CVE-2026-43499的本地提权适配，集成嵌入式 KernelSU.CVE-2026-43499+KernelSU越狱模式
no-22-github/unplusCVE-2026-43499 per-boot root exploit — core logic (arm64 Android GKI 6.6)
danasuley/cve-2023-28252-Обнаружение эксплойта CVE-2023-28252
striveben/cve-2020-1472Exploit for CVE-2020-1472, a Windows NetLogon privilege escalation vulnerability, using Impacket to achieve domain admin compromise.
