#1Tools specifically designed to exploit common web application vulnerabilities (e.g., SQL injection, XSS).
Kitploit recommended

log4j 1.x RCE Poc -- CVE-2021-4104
Exploit for CVE-2024-29847

CVE-2019-7238 Nexus RCE漏洞图形化一键检测工具。CVE-2019-7238 Nexus RCE Vul POC Tool.

POC for CVE-2024-42327: Zabbix Privilege Escalation -> RCE

CVE-2019-9978 - (PoC) RCE in Social WarFare Plugin (<=3.5.2)

CVE-2025-31324, SAP Exploit

Proof of Concept for CVE-2018-11776

CVE-2023-22621: SSTI to RCE by Exploiting Email Templates affecting Strapi Versions <=4.5.5

ActionScript Proof of Concept to perform cross-domain reads

PoC for CVE-2022-23940

Proof-of-concept exploit for CVE-2026-42945, a critical heap buffer overflow in NGINX's rewrite module enabling unauthenticated remote code…

A PDF generator for CVE-2025-54988

Wordpress Vulnerability - XSS ( Cross-Site Scripting )

Redis 沙盒逃逸(CVE-2022-0543)POC&EXP

CVE-2017-12149 JBOSS as 6.X反序列化(反弹shell版)

Nuclei templates and exploit resources for CRLF based desync attacks

Apache ActiveMQ Classic RCE research: CVE-2026-34197 / CVE-2026-42588 bypass chain + hardened-6.2.6 audit findings + Crowdfense comparison

Remote Code Execution vulnerability on ArcSight Logger