#1Tools for weaponizing vulnerabilities to gain unauthorized access to systems or data.
Kitploit recommended

CVE-2022-34918 netfilter nf_tables 本地提权 POC
Retired TrustedSec Capabilities

Exploit for CVE-2017-1000367: local privilege escalation via sudo's SELinux role bypass on selinux-enabled systems. Requires sudo permissions and…

Scripts and utilities to help your hacking needs

Chrome V8 n-day exploits that I've written.

Java-based exploit for CVE-2022-26134 that injects a Godzilla webshell into Confluence servers, enabling remote code execution with password and key…

DNS tunneling tool using PowerShell and Nslookup to exfiltrate data and deliver payloads via DNS TXT/MX records, bypassing Constrained Language Mode…

CAN bus injection toolkit for automotive security testing. Performs interface control, sniffing, and CAN injection attacks on vehicle networks,…

CVE-2021-41773 playground

Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens

Simple PoC of the CVE-2023-23397 vulnerability with the payload sent by email.

A webkit-based kernel exploit and jailbreak for PS5

An evolutionary knowledge-based fuzzer

POC for CVE-2022-1388

Simple Python 3 script to detect the "Log4j" Java library vulnerability (CVE-2021-44228) for a list of URLs with multithreading

Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573,…

Using CVE-2023-21768 to manual map kernel mode driver

A POC for the Huge Dirty Cow vulnerability (CVE-2017-1000405)