slot2
cenobyte-vincit/slot2UEFI GRUB2 bootkit that installs a pre-boot networked implant via NVRAM boot option, chainloads a UKI, executes a dracut payload, and kexecs the…
persistence-mechanismsdata-exfiltrationpost-exploitation+5
Tools for maintaining access, exploring, and expanding control within compromised systems and networks.
cenobyte-vincit/slot2UEFI GRUB2 bootkit that installs a pre-boot networked implant via NVRAM boot option, chainloads a UKI, executes a dracut payload, and kexecs the…
cenobyte-vincit/memdumperAbuses macOS debugger entitlements and DYLD_INSERT_LIBRARIES to dump or search a running process's memory while shifting EDR attribution to a signed…
cenobyte-vincit/dyenIn-memory Mach-O dylib loader for stock macOS Python; decrypts, maps, and runs payloads without dlopen or writing to disk, with optional encrypted…
velessecurity/cve-2021-1675-printnightmare-analysisTechnical write-up and analysis of PrintNightmare (CVE-2021-1675 / CVE-2021-34527), covering RCE/LPE exploitation, detection via Windows event logs,…
r0rt1z2/ghostlock-5.10Kernel root exploit (CVE-2026-43499) for some 5.X devices (mostly Amazon)
gitchw/ghostlock-cve-2026-43499CVE-2026-43499 (GhostLock) — Linux kernel futex PI rt_mutex UAF ARM32 privilege escalation research targeting Huawei Watch 4 Pro (kernel 5.4.210)
securifera/cve-2026-20217Reproduces ZendTo unauthenticated ClamAV RCE and root privilege escalation in an authorized lab, with pinned Docker target, fail-closed verification,…
valentineus/hp-slate7-root-kitHP Slate 7 2800 Android 4.1.1 rooting kit using CVE-2015-1805.
cypherhippie/cve-2026-66804Local Windows privilege escalation PoC for CVE-2026-66804: plants a COM DLL in a missing path to abuse Camera FrameServer and impersonate SYSTEM.
graysignal/cve-2024-23897-jenkins-arbitrary-read-file-vulnerabilityUnauthenticated Jenkins CLI exploit scanner for CVE-2024-23897 that detects vulnerable versions and reads arbitrary files from the controller through…
horkimhab/cve-2026-65400Proof-of-concept exploit for CVE-2026-65400 enabling authenticated file read/write, reverse shells, and persistence on macOS via Apple ScreenSharing.
ivanitlearning/juicy-potato-x86Windows privilege escalation exploit that abuses service token impersonation to execute arbitrary commands with SYSTEM privileges, designed for x86…
loosehose/dutchovenApplication-scoped Windows network brownouts in native C and BOF form
linux-tools/vivo_iqoo_neo_9_root_research_on_cve-2025-21479iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** — 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案
toanln-cov/cve-2026-74251Unauthenticated SQL Injection via Attribute Filter in Phoca Cart
vognik/cve-2026-26980Unauthenticated SQL injection exploit for Ghost CMS Content API (CVE-2026-26980); dumps database tables from SQLite/MySQL with active/passive checks…
ahm3dgg/cve-2018-8611Local Windows kernel privilege escalation exploit for CVE-2018-8611 (KTM UAF) using write-what-where and increment primitives.
defineid/skeletonkeyCVE-2026-6765 · Test only FormAutofill handlers exposed in Firefox