Tools

cblabresearch/clematis

PE to shellcode

vlad902/hacking-team-windows-kernel-lpe

Previously-0day exploit from the Hacking Team leak, written by Eugene Ching/Qavar.

blacknbunny/mcreator

Encoded Reverse Shell Generator With Techniques To Bypass AV's

senzee1984/micr0_shell

micr0shell is a Python script that dynamically generates Windows X64 PIC Null-Free reverse shell shellcode.

hatriot/shellme

simple shellcode generator

umpolungfish/byvalver

takes shellcode bad-bytes and banishes them, returning cleaned shellcode with preserved functionalities

pimps/cve-2019-2725

WebLogic Insecure Deserialization - CVE-2019-2725 payload builder & exploit

kira2040k/avbypass

golang script for bypass AV and work only in windows platform

bigsizeme/cve-2018-2893

反弹shell生成器

touhidshaikh/bin2shell

bin2shell is very small utils for extract shell code from the binary file

justin-p/psforgot2keyxchange

PoC for Forgot2kEyXCHANGE (CVE-2020-0688) written in PowerShell

johnjohnsp1/cve-2014-4113

PowerShell-based exploit for CVE-2014-4113 targeting x64 Windows systems with remote payload download and execution.

cerberusmrxi/krayincrm-rce-exploit-cve-2026-38526

CVE-2026-38526 exploit for Krayin CRM v2.2.x - Authenticated RCE via TinyMCE file upload bypass. Features interactive shell, multi-type payloads,…

drac0nids/cve-2017-8570

## 在kali中自动化生成cve-2017-8570的恶意ppsx文件和配置msf监听

mracumen/cve-2021-40444

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

hackthem/openstamanager_rce_exploit-cve-2026-38751-

OpenSTAManager RCE Exploit (CVE-2026-38751)

stuub/cve-2025-3969-exploit

CVE-2025-3969: Exploit PoC (OS CMD injection, Web Shell, Interactive Shell)

y0naldez/cve-2024-28397-js2py-rce

Generates JavaScript payloads to exploit CVE-2024-28397 Js2Py sandbox escape, enabling remote command execution and reverse shells via Python…