#1RAT development frameworks, detection tools, and post-exploitation remote access utilities.
Kitploit recommended
r4vl1t0/cve-2019-0232Exploit based in /jaiguptanick/CVE-2019-0232
havbay/cve-2025-47812-pocUnauthenticated remote code execution exploit for Wing FTP Server (CVE-2025-47812) with multiple reverse shell payloads, interactive and CLI modes,…
wenura17125/cve-2025-49131-pocProof-of-concept exploit for CVE-2025-49131, a sandbox escape in FastGPT allowing arbitrary file read/write, import bypass, and remote code execution…
krill-x7/cve-2022-25226Python exploit script for ThinVNC 1.0b1 authentication bypass (CVE-2022-25226) that chains unauthenticated /cmd endpoint access with AMSI bypass and…
mrk336/cve-2025-27480CVE-2025-27480 exposes a buffer overflow in OpenSSH 8.9p1 via a malformed SSH_USERAUTH packet. Attackers can inject shellcode and gain SYSTEM-level…
crackercat/cve-2021-26084Atlassian Confluence Pre-Auth RCE
lucaspdiniz/cve-2026-24061Vulnerability in GNU InetUtils telnetd Enables Remote Root Access
mikethehash/cve-2025-55182A modified and a little boosted exploit for CVE-2025-55182, React2Shell: Pre-authentication Remote Code Execution in React Server Packages
writegsqword/cve-2024-39840-pocProof-of-concept exploit for CVE-2024-39840, a remote code execution vulnerability in Factorio 1.1.86. Adapted from a detailed writeup, demonstrating…
pppxo/cve-2025-49596-pocPoC for CVE-2025-49596 on linux targets
liamromanis101/cve-2025-55182Python exploit for CVE-2025-55182, a server-side JavaScript injection in Next.js/React enabling remote code execution via malformed multipart form…
somhm-solutions/shell-shock*CVE-2014-6271* Unix Arbitrary Code Execution Exploit commonly know as Shell Shock. Examples, Docs, Incident Response and Vulnerability/Risk…
r0otk3r/cve-2025-3248Scanner and exploit for CVE-2025-3248, an unauthenticated RCE in Langflow AI. Includes a vulnerability checker and a reverse shell payload generator…
blindma1den/cve-2025-47812Unauthenticated remote code execution exploit for Wing FTP Server < 7.4.4, enabling command execution and reverse shells via Lua injection in session…
00mjk/exploit-cve-2017-7494SambaCry exploit (CVE-2017-7494)
z3n70/cve-2026-24061Ruby-based exploit for CVE-2026-24061 that executes arbitrary commands on remote targets, supporting multi-threaded scanning and command injection…
mrsol0/cve-2025-55182-terminalThis is a POC for testing your projects that are vulnerable to CVE-2025-55182 with a terminal and ability to scan a list
thealchimist86/cve-2023-27163---maltrail-0.53---rceExploit for CVE-2023-27163 - Maltrail(0.53) - RCE
