Tools

polo35/cve-2020-0022

CVE-2020-0022 vulnerability exploitation on Bouygues BBox Miami (Android TV 8.0 - ARM32 Cortex A9)

s3cur3th1ssh1t/nimshellcodefluctuation

ShellcodeFluctuation PoC ported to Nim

mbanyamer/cve-2025-30397---windows-server-2025-jscript-rce-use-after-free-

Remote Code Execution via Use-After-Free in JScript.dll (CVE-2025-30397)

codextf2/cobaltstrike_bofloader

open source port/reimplementation of the Cobalt Strike BOF Loader as is

kristal-g/cve-2021-40449_poc

Exploit for CVE-2021-40449

mzeyong/cve-2017-13089

CVE-2017-13089

boogipop/cve-2023-22527-godzilla-memshell

CVE-2023-22527 内存马注入工具

daniel224455/katana

Let's hijack our bootchain - CVE-2021-30327

an00brektn/gopher47

A third-party Gopher Assassin for the Havoc Framework.

forrest-orr/wizardopium

Google Chrome Use After Free

exploit-database/exploitdb-bin-sploits

exploitdb-bin-sploits // Exploit-Database's binary exploits (what was located in the /sploits directory)

dump-guy/sc2pe

Simple dotnet Native AOT app that uses AsmResolver to convert shellcode to PE

operatorequals/smbrat

A Windows Remote Administration Tool in Visual Basic with UNC paths

prodigiousmind/cve-2023-41425

WonderCMS Authenticated RCE - CVE-2023-41425

pwnedshell/larascript

Laravel RCE exploit. CVE-2018-15133

qmadev/crabloader

Rust-based User-Defined Reflective Loader for Cobalt Strike payloads. Avoids RWX memory pages for OPSEC safety. Includes an extractor tool for loader…

davidbuchanan314/wampage

WAMpage - A WebOS root LPE exploit chain (CVE-2022-23731)

pentestical/cve-2020-9484

Bash proof-of-concept exploit for CVE-2020-9484 enabling remote code execution on Apache Tomcat via insecure deserialization in file uploads, with…