#1Shellcode generation, encoding, obfuscation, and testing frameworks.
Kitploit recommended

CVE-2025-62215: Windows Kernel Race Condition + Double-Free EoP
A shellcode writing toolkit

A collaborative web exploitation framework.

Cross-platform C2 agent for Mythic with dynamic function loading, SOCKS5 proxy, file operations, shellcode injection, and macOS/Windows…


## 在kali中自动化生成cve-2017-8570的恶意ppsx文件和配置msf监听

This is a proof-of-concept Metasploit module exploit for CVE-2015-1578, a buffer overflow vulnerability in Achat 0.150 beta7 on Windows. Exploitation…

C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection

Documentation and proof of concept code for CVE-2022-24125 and CVE-2022-24126.

Python exploit for Webmin CVE-2022-0824 with dual-mode support: direct command execution and reverse shell. Features multiple payload types,…


Generates JavaScript payloads to exploit CVE-2024-28397 Js2Py sandbox escape, enabling remote command execution and reverse shells via Python…

Suite for reverse shell handling geared toward working within the native shell

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Malicious DOCX generator exploiting CVE-2021-40444 (Microsoft Office Word RCE) with CAB-based DLL side-loading and CAB-less RAR/WSF attack chains for…

m-y-mo: https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632

CVE-2019-9766 React

WebLogic Insecure Deserialization - CVE-2019-2725 payload builder & exploit