Tools

neonwhiterabbit/cve-2021-4034

Bash script exploiting CVE-2021-4034 (Pwnkit) for local privilege escalation on vulnerable Linux systems. Copy-paste execution for quick testing.

rbowes-r7/unrar-cve-2022-30333-poc

Proof-of-concept exploit for CVE-2022-30333 path traversal in unRAR, generating malicious .rar files to plant payloads at arbitrary locations.…

al1ex/cve-2017-7269

Exploit for CVE-2017-7269, a buffer overflow in IIS 6.0 WebDAV, enabling remote code execution. Designed for use with Metasploit in penetration…

infobyte/faraday_templates

Template repository for Faraday security platform, providing reusable vulnerability scanning and exploitation templates for automated penetration…

sfrdevelopment/windows-smb-vulnerability-framework-cve-2025-33073

Research framework for CVE-2025-33073, a Windows SMB Client privilege escalation vulnerability. Provides malicious SMB server and client exploit…

shinthink/pbck-exploit

📤 Mass exploitation framework for CVE-2026-56290 — Page Builder CK Joomla unauthenticated file upload to RCE

neseos-corp/cve-2026-50657

Exploit code for CVE-2026-50657 targeting Nese Vista through Nese 11 (BETA). Includes patch details and affected OS versions for security testing and…

g0d150ne/wp2shell

Modular WordPress pre-auth exploit framework chaining SQL injection and authentication bypass to deliver remote code execution, interactive shells,…

cerberusmrxi/apache-lua-buffer-overflow-exploit-cve-2021-44790

Apache HTTP Server 2.4.x mod_lua Buffer Overflow (CVE-2021-44790) - Advanced exploitation framework with fingerprinting, multi-stage scanning, plugin…

izxci/cve-2026-49083

Python exploit for CVE-2026-49083 targeting privilege escalation in the LatePoint Calendar Booking WordPress plugin. Provides automated exploitation…

asepsaepdin/cve-2010-1240

Educational proof-of-concept demonstrating how to embed a Meterpreter backdoor into a PDF file exploiting CVE-2010-1240, with step-by-step Metasploit…

d3vpp/metasploit-modules

Collection of proof-of-concept Metasploit modules for exploitation and post-exploitation testing, providing custom payloads and auxiliary functions…

darrynb89/cve-2004-1561

Python port of a Metasploit exploit targeting CVE-2004-1561 for remote code execution. Designed for penetration testing and vulnerability validation…

jenderal92/rce-exploit-framework

This framework is designed to assist penetration testers or developers in understanding the mechanics of remote code execution (RCE) exploitation.

pelagornisandersi/windows-7-automated-exploitation-using-metasploit-framework-

Automated bash script which scans an ip for potential vulnerability to eternalblue using nmap and then exploit using metasploit framework which uses…

hbesljx/cve-2025-8088-exp

One-click payload generator for WinRAR vulnerability CVE-2025-8088, enabling rapid exploit deployment and testing.

cyb3r-techie/msf_passspray_wordlist_generator

A handy tool that helps to create your own wordlist for Metasploit framework, in order to carry out a password spray attack against various network…