go-exploit is an exploit development framework for Go. The framework helps exploit developers create small, self-contained, portable, and consistent exploits. The framework was developed to simplify large scale scanning, exploitation, and integration with other tools. For API documentation, check out the package on pkg.go.dev/github.com/vulncheck-oss/go-exploit.

The Go Exploit Framework includes the following Phases which can be chained or executed independently:

• Go Exploit Framework Phases
  • Step 1 - Target Verification
  • Step 2 - Version Scanning
  • Step 3 - Exploitation
  • Step 4 - Command & Control

The Go Exploit Framework includes these additional features:

• Auto-detection of SSL/TLS on the remote target.
• Exploit declared SSL requirements for exploits that can only talk to a target over SSL.
• Fully proxy-aware.
• Key-value or JSON output for easy integration into other automated systems.
• Builtin Java gadgets, classes, LDAP, and serializer infrastructure.
• Builtin dotnet serializers and generators.
• A selection of multiple network protocol helpers including SMB/NetBIOS.
• Many example reverse shell, dropper, and bind shell payloads.
• Functionality that integrates exploitation with other tools or frameworks like Metasploit and Sliver.
• Builtin "c2" for catching encrypted/unencrypted shells or hosting implants, as well as the ability to create your own C2 integrations.
• Automatic handling of custom payloads and commands.
• Supports multiple target formats including lists, file-based, VulnCheck IP-Intel, and more.

Documentation for specific features can be found in the docs/ directory.

• CVE-2025-0364: An example of a go-exploit using complex web application logic for BigAnt CVE-2025-0364.
• CVE-2023-22527: Three go-exploit implementations taking unique approaches to Atlassian Confluence CVE-2023-22527.
• CVE-2023-25194: Demonstrates exploiting CVE-2023-25194 against Apache Druid (using Kafka).
• CVE-2023-46604: Demonstrates exploiting CVE-2023-46604 and using the go-exploit HTTPServeFile c2.
• CVE-2023-36845: Scans for Juniper firewalls to determine if they are vulnerable to CVE-2023-36845.
• CVE-2023-51467: A go-exploit implementation of CVE-2023-51467 that lands a Nashorn reverse shell.

Community contributions in the form of issues and features are welcome. Please see our contributors guide in CONTRIBUTING.md.

go-exploit is licensed under the Apache License, Version 2.0. For more details, refer to the LICENSE file.