Tools

ceh-tn/the-axer

Automated payload generator wrapping msfvenom to streamline creation of platform-specific, encoded, and binded payloads for penetration testing…

ahhh/ntp_trojan

Reverse NTP remote access trojan in python, for penetration testers

epotseluevskaya/aspx_webshell_coffloader

ASPX web shell with COFF loader for executing Beacon Object Files (BOFs) on target servers via a semi-interactive Python client, designed for…

convisolabs/cve-2022-24834

Generic heap overflow exploit for CVE-2022-24834 in Redis Lua cjson library, with auto gadget finder, symbol resolution, and reverse shell handler…

bounteous17/libenom

CLI wrapper for MSFvenom that streamlines payload creation with profile management, automated listener generation, and organized output for…

ilikeoyt/cve-2023-4450-attack

Automated Java-based exploit tool for CVE-2023-4450 targeting JimuReport, featuring command execution and memory shell injection (Behinder) for…

hienkiet/cve-2022-21445-for-12.2.1.3.0-weblogic

Pre-authentication remote code execution exploit for Oracle WebLogic ADF Faces (CVE-2022-21445, CVSS 9.8). Includes detailed environment setup,…

icebreack/cve-2022-24637

Fixed exploit for CVE-2022-24637 enabling reliable exploitation of the identified vulnerability for penetration testing and security assessment…

komomon/cve-2020-16898-exp-poc

Proof-of-concept exploit for CVE-2020-16898, a Windows TCP/IP remote code execution vulnerability. Includes Python-based exploit scripts targeting…

hussienmisbah/exploits

Repository containing exploit scripts for various CVEs, targeting web applications, binaries, and network services, suitable for penetration testing…

jweny/cve-2024-32002_hook

Exploit for CVE-2024-32002, providing a proof-of-concept hook for vulnerability verification and penetration testing.

khal4n1/cve-2022-36804

Python exploit script for CVE-2022-36804 targeting Bitbucket. Automates exploitation of a command injection vulnerability for penetration testing and…

soralis0912/cve-2022-38181-aristotle

C-based exploit targeting vulnerability CVE-2022-38181. Provides exploitation code for penetration testing, vulnerability verification, and security…

dotnetguard/cve-2025-55182-exploit

CVE-2025-55182 — Next.js Flight Deserialization RCE exploit with interactive shell, single-command execution and multi-payload reverse shell chain.…

hualy13/cve-2025-55182

Automated proof-of-concept exploit for Next.js RCE (CVE-2025-55182) with interactive shell, batch scanning, and advanced payload encoding for…

emilliewatson96/sprycve-2026-10520

Python-based exploit module targeting CVE-2026-10520 with automated payload delivery and vulnerability verification for penetration testing…

epsilonpointori/epsilonpointlnk

Generates obfuscated .lnk files exploiting CVE-2026-21510 with LNK stomping, encrypted payloads, and anti-forensics for authorized penetration…

zi0black/cve-2016-010033-010045

Python3 port of a PHP mail() remote code execution exploit targeting CVE-2016-010033/45 for penetration testing and vulnerability verification.