#1Binary exploitation techniques, ROP chains, heap exploitation, format strings, and memory corruption research.
Kitploit recommended
danielw98/zero-click-exploit-analysisCVE-2025-55177 + CVE-2025-43300: reverse-engineering the WhatsApp-ImageIO zero-click iOS chain, with interactive labs.
vr00mm/cve-2025-49144PoC CVE-2025-49144
sneakynachos/cve-2026-85045Proof-of-concept trigger for CVE-2026-85045, a Chrome V8 Maglev deoptimization bug causing incorrect array output on vulnerable builds.
blyth0he/cve-2022-33679poc of CVE-2022-33679
pashkela/cve-2013-2094CVE-2013-2094 Linux 2.6.32/2.6.37 - 3.8.10 PERF_EVENTS local root x86/x86_64
aiyakami/cve-2021-21974自研针对ESXI 堆栈溢出的CVE-2021-21974 POC，只支持项目给出的的目标和环境，用于学习和研究
joedaguy/exploit11.2Exploit iOS 11.2.x by ZIMPERIUM and semi-completed by me. Sandbox escapes on CVE-2018-4087.
sic4rio/cve-2009-3103---srv2.sys-smb-code-execution-python-ms09-050-Microsoft Windows - 'srv2.sys' SMB Code Execution (Python) (MS09-050)
kukrimate/cve-2020-14372Proof-of-concept exploit and write-up for CVE-2020-14372, demonstrating Secure Boot bypass via malicious ACPI SSDT to disable kernel lockdown and…
kiwids0220/cve-2024-26230C-based proof-of-concept exploit for CVE-2024-26230, demonstrating a kernel privilege escalation technique. Intended for educational vulnerability…
kinu404/cve-2024-6387Proof-of-concept exploit for CVE-2024-6387 targeting glibc address manipulation to achieve remote code execution.
d0rb/cve-2023-33242Proof-of-concept exploit for CVE-2023-33242 demonstrating a bit extraction attack on the Lindell17 ECDSA protocol, enabling iterative private key…
spiralbl0ck/-cve-2018-0834-aab-aarCVE-2018-0834 full code exec
satheesh575555/linux-4.19.72_cve-2023-0386Kernel exploit for CVE-2023-0386, a Linux kernel privilege escalation vulnerability, providing a proof-of-concept for security research and testing.
spydomain/cve-2021-22555-pocHeap overflow exploit for CVE-2021-22555 achieving local privilege escalation to root on Ubuntu 20.04 with kernel 5.8.0-48.
0xcyberstan/cve-2026-53360-pocPoC for CVE-2026-53360: guest-triggered heap out-of-bounds read/write in KVM SEV-SNP Page State Change (PSC) handling.
mrr0b0t19/cve-2024-6387-exploit-pocProof-of-concept exploit for CVE-2024-6387 targeting vulnerable OpenSSH servers via heap manipulation and race condition to achieve remote code…
ben-slates/cve-2026-31431-exploitProof-of-concept exploit for CVE-2026-31431, a Linux kernel page-cache corruption vulnerability enabling local privilege escalation via algif_aead.…
