Tools

nxploited/cve-2026-13714

Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution

nxploited/cve-2025-13390

WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover

m4lv0id/lare

[L]ocal [A]uto [R]oot [E]xploiter is a simple bash script that helps you deploy local root exploits from your attacking machine when your victim…

cheshireca7/smbautorelay

SMB Auto Relay provides the automation of SMB/NTLM Relay technique for pentesting and red teaming exercises in active directory environments.

mawk0235/cve-2024-24401

Auto exploitation tool for CVE-2024-24401.

ktn1990/cve-2019-9978

Wordpress Social Warfare Remote Code Execution (AUTO UPLOAD SHELL)

cerberusmrxi/krayincrm-rce-exploit-cve-2026-38526

CVE-2026-38526 exploit for Krayin CRM v2.2.x - Authenticated RCE via TinyMCE file upload bypass. Features interactive shell, multi-type payloads,…

jenderal92/shadow-vault

Shadow Vault – Add shadow users with SHA-512 hash, auto aging match, multiple write fallbacks.

tegal1337/nekobotv1

NekoBot | Auto Exploiter With 500+ Exploit 2000+ Shell

xm0kht4r/ven0m-ransomware

Fully undetectable and evasive ransomware written in Rust, leveraging a BYOVD technique to disable AV/EDR solutions on the infected systems.

warpedatom/offsetinspect

PowerShell toolkit for AMSI/Defender detection-boundary analysis and static malware triage maps byte offsets to detection triggers, plus YARA,…

goichot/cve-2020-3153

Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal

blacksnufkin/geckodroid

Android client for Adaptix C2 framework enabling remote agent management, interactive command shells, listener control, payload generation, and…