metasploit-framework
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
command-and-controldatabase-securitydata-exfiltration+20
rapid7/metasploit-frameworkOpen-source exploitation framework with modular payload, encoder, and auxiliary system for penetration testing, vulnerability validation, and…
hakkuri01/r2rsInteractive Ruby shell for authorized CVE-2025-55182 (react2shell) testing
funixone/exploit-cve-2026-8832-Automated RCE exploit for WordPress WPCode Lite v2.3.5. Executes 6-step exploitation chain via XML-RPC bypass with 8 built-in PHP payloads, including…
vuducmanhno100-cloud/cve-2024-6387CVE-2024-6387 POC (Currently being edited)
0xbinder/cve-2026-0073An automated exploit for CVE-2026-0073 (Android ADB TLS Auth Bypass). Features a built-in mDNS/Zeroconf scanner to instantly discover randomized…
iss4cf0ng/duplexspycsAn open-source, C#-based remote administration tool (RAT), enabling complete control of a remote Windows machine, designed for legitimate remote…
luoqichen/cve-2025-55182-pocGo-based scanner and exploitation tool for CVE-2025-55182 (Next.js RCE). Supports batch scanning, command execution, Godzilla memory shell injection,…
aadi0258/exploit-cve-2024-23897Exploit for CVE-2024-23897 in Jenkins, enabling file read and remote code execution via crafted requests. Includes Docker setup and Groovy scripts…
webldix/cve-2024-31317-poc-deployerAutomated deployment tool for CVE-2024-31317 PoC on Android 9-13, enabling privilege escalation via Zygote injection and reverse shell execution.
iuds/-cve-2024-52010-Automated exploit tool targeting CVE-2024-52010 for penetration testing and vulnerability validation.
khaidtraivch/cve-2021-41773-apache-2.4.49-Exploit scripts for CVE-2021-41773 (Apache 2.4.49) enabling path traversal and remote code execution via CGI, including a reverse shell payload.
tamirido30/cve-2024-10914-exploitCVE-2024-10914 Shell Exploit
gildasio/wshlientA simple tool to interact with web shells and command injection vulnerabilities
thecybermind/w48crashPoC code for vulnerability in webmod v0.48. Originally written in 2007, assigned CVE-2007-1260.
optiv/freezeFreeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
d3fudd/cve-2017-7494_sambacrySambaCry (CVE-2017-7494) exploit for Samba | bind shell without Metasploit
superzerosec/cve-2020-7247OpenSMTPD version 6.6.2 remote code execution exploit
inf0secrabbit/badassmacrosC# tool that generates malicious VBA macros with shellcode injection, VBA purging, and sandbox detection for red team operations.