SpringPeace

SpringPeace SpringPeace là GUI/CLI GPL-3.0-or-later để tạo payload candidate từ Android boot.img cho CVE-2026-43499. Ứng dụng Windows dùng giao diện SpringPeace, tự kiểm tra ADB, đọc boot.img, build các candidate payload.so, rồi thử qua ADB theo thứ tự manifest. SpringPeace is a GPL-3.0-or-later...

WhatsRCE

WhatsRCE Este es un generador automatizado de payloads para CVE-2019-11932 Ejecución remota de código en WhatsApp 1. Instalación automática de GCC comando inofensivo, puedes comprobar que es de código abierto 2. Guardado en archivo .GIF ¿Cómo usarlo? root@kitploit: sudo apt install git git clone...

Text4ShellPayloads

Text4ShellPayloads Este proyecto incluye un script de Python que genera comandos maliciosos aprovechando la vulnerabilidad CVE-2022-42889 El servidor vulnerable se configuró según las indicaciones de "Karthik U J" siguiendo el paso en https://github.com/karthikuj/cve-2022-42889-text4shell-docker...

cve-2019-9081

cve-2019-9081 exp genera el payload Basta con pasar el payload como parámetro...

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization...

CVE-2023-21707

CVE-2023-21707 Generación de payload de deserialización de Exchange root@kitploit: .\ConsoleApp1.exe "calc"...

api_wordlist

apiwordlist A wordlist of API names used for fuzzing web application APIs. Contents apiseeninwild.txt - This contains API function names I've seen in the wild. actions.txt - All API function name verbs objects.txt - All API function name nouns actions-uppercase.txt - API function name verbs with...

SpringPeace

SpringPeace SpringPeace ist eine GUI/CLI unter GPL-3.0-or-later zur Erstellung von Payload-Kandidaten aus Android boot.img für CVE-2026-43499. Die Windows-App prüft ADB, liest boot.img, erstellt payload.so-Kandidaten und testet sie über ADB in Manifest-Reihenfolge. SpringPeace ist eine GUI/CLI...

sqlicat

sqlicat Framework de SQL Injection em Python puro stdlib...

exploit-development-framework

Exploit Development Framework EDF A modular, educational ex...

AI-for-fastjson-1.2.83-RCE-skill

fastjson-1.2.83-RCEskill AI agent skill for detecting and exp...

Exploit for Code Injection in Exiftool_Project Exiftool

CVE-2021-22204 - ExifTool Arbitrary Code Execution An upgrade...

📄 HTTP/2 Multi-Server HPACK Exhaustion

This code implements a multi-target HTTP/2 resource exhaustion framework designed to stress or overwhelm server implementations through protocol-level amplification techniques. It includes server-specific payload generation for multiple platforms, automated connection orchestration, stream scalin...

Data Agents under Attack: Vulnerabilities in LLM-Driven Analytical Systems

Data agents integrate LLM-driven reasoning with relational data access, executable analytical tools, and multi-step workflow orchestration, making them increasingly central to enterprise analytics. This integration introduces new security vulnerabilities across data resources, database execution,...

Exploit for CVE-2025-66478

CVE-2025-66478-Research-Proof-of-Concept Overview This re...

The Infinite Mutation Engine? Measuring Polymorphism in LLM-Generated Offensive Code

Malware authors have traditionally relied on polymorphic techniques to produce variants in the same malware family, complicating signature-based detection. Integrating generative AI into offensive toolchains enables attackers to synthesize structurally diverse payloads with identical behavior,...

Exploit for Deserialization of Untrusted Data in Facebook React

markdown Summary CVE-2025-55182 Scanner is a high-perfor...

lightweight-msf

Lightweight-MSF !License: MIThttps://img.shields.io/badge...

linux-security-tools

Linux Security Tools Linux security tools, scanners, crackers...

📄 Jinja 2 1.4.0 Tactical RMM SSTI Detection

This proof of concept script detects potential server-side template injection vulnerabilities in web applications using template engines such as Jinja. The script sends a dynamically generated mathematical expression within a template payload to a target URL parameter. If the server evaluates the...