Post-Exploitation

gmh5225/aether-c2-framework

🛠️ Explore custom C2 TTPs with Aether-C2-Framework, focusing on lightweight Rust implants and stealthy transport stacks to reduce forensic…

gmh5225/access_updated

Kernel-mode syscall wrapper with Zydis-based dynamic pattern finding for Windows 10/11

etahen/etahen

PS5 homebrew enabler payload offering post-exploitation features: custom plugin/payload loading, unsigned fself/fpkg support, debug settings, FTP…

rat5ak/cve-2026-66804-crossdevice-service-eop

CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM

kaandemir993/agent-tesla-apc-injection-token-manipulation-registry-persistence-analysis

"Reverse engineering analysis of Agent Tesla, a .NET-based info-stealer that uses APC injection, token manipulation, and registry persistence.…

warpedatom/noisehound

Detection-aware BloodHound attack-path scoring - find the quietest route to your objective, calibrated across audit/EDR/SIEM tiers.

guard-wait/cve-2026-64563_exp

Unverified Linux kernel privilege-escalation PoC using msg_msgseg cross-cache reuse to overlap skb and pipe_buffer, altering pipe flags to read…

e-fin/pypspipejack

Python implementation of OpenPsPipeJack

strategic-automation/violin

Agentic pentest profile for Hermes: 31 playbooks for authorised recon, web/access-control attacks, safe exploit validation, and evidence-driven…

686f6c61/poc-copyescape-cve-2026-17106

PoC funcional de CVE-2026-17106 (CopyEscape): carrera TOCTOU en docker cp que permite escritura arbitraria en el host Docker. Laboratorio Docker +…

aliyabuz25/cve-2025-49173

Security research — PoC for local root privilege escalation on macOS Mavericks 10.9.

aramosf/cve-2026-68398

CVE-2026-68398 Ubuntu PPPoL2TP use-after-free local privilege escalation

qm4rs/cve-2026-0075

Probes CVE-2026-0075 Android ContactsProvider side channel with a no-permission PoC, enabling root-cause analysis and patched-vs-vulnerable…

knz-source/cve-2026-23111-poc-noddlenpottato

CVE-2026-23111 nf_tables catchall UAF — unprivileged LPE for Linux 5.10-6.18. Auto-adaptive exploit with KASLR bypass, arbitrary kernel read, and ROP…

e-r-butch/f9360-cve43499

SM-F9360 (Galaxy Z Fold4, q4q) locked-bootloader KernelSU root — CVE-2026-43499 temp root → LD_PRELOAD DEFEX bypass → no-LTO clang-12 kernelsu.ko.…

hyblove/iqoo-temp-root

vivo/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本