Tools

tarpeg007/cve-2026-19490

NetScaler ADC/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause analysis + PoC

kemrec/cve-2025-0324-axis-vapix-privesc

Root-cause analysis and safety-gated verification tool for CVE-2025-0324, a privilege-escalation flaw in AXIS OS VAPIX allowing any authenticated…

australeo/cve-2021-28476

Proof-of-concept for CVE-2021-28476, a Hyper-V vmswitch.sys arbitrary pointer dereference allowing guest-to-host denial-of-service and potential RCE.

joakimbulow/cve-2026-23907

Proof-of-concept exploit for Apache PDFBox path traversal vulnerability (CVE-2026-23907), demonstrating arbitrary file write via malicious PDFs with…

trustedsec/coffloader

Run Beacon Object Files (BOFs) outside Cobalt Strike by parsing 64-bit COFF object files, with Beacon-compatible argument generation and helper…

nccgroup/detaped

Detaped is a Python disassembler and decompiler for Duktape. The intended use is for source code review and analysis in situations where you only…

skrkcb2/cve-2025-0851

Proof-of-concept exploit for CVE-2025-0851, a file traversal vulnerability in Deep Java Library's tar/zip model extraction utility, enabling…

ugvxb/cve-2026-9490

The ACCSvc service creates a Named Pipe with a weak Security Descriptor that allows any authenticated user to connect and send messages. When a…

ctn-qvo/auto_extract_offsets

Automated offset calculator for CVE-2026-43499, enabling precise memory offset computation for vulnerability exploitation and binary analysis.

blacksnufkin/holygrail

BYOVD hunter to help prioritize windows drivers worth manual analysis

xyl2k/black-eye-rsa-attacking-toolkit-v0.1f-compiled

The great RSA Attacking Toolkit compiled for Windows

own2pwn/r0ak

r0ak ("roak") is the Ring 0 Army Knife -- A Command Line Utility To Read/Write/Execute Ring Zero on for Windows 10 Systems

moiz-2x/cve-2025-21420_poc

Proof of Concept CVE-2025-21420 (Windows Disk Cleanup Tool EoP)

nam3lum/msi-central_privesc

CVE-2022-38532 - Local Privilege Escalation vulnerability in MSI Center Application

tuo4n8/cve-2020-2950

Proof-of-concept exploit for CVE-2020-2950, demonstrating AMF deserialization to Java deserialization in Oracle Business Intelligence, with debug…

subc0ol/detection-for-cve-2017-2793

C-based detection tool for CVE-2017-2793, enabling identification and analysis of the specific vulnerability in affected systems.

nektra/cve-2010-3971-hotpatch

Do you own security hotfix with Deviare hooking