Tools

0xjohnnydev/cve-2026-20637-applesepkeystore-uaf

CVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS/macOS kernel vulnerability (patched in 26.4)

ashemery/exploitation-course

Offensive Software Exploitation Course

xairy/kernel-exploits

My proof-of-concept exploits for the Linux kernel

nytrorst/shellcodecompiler

Shellcode Compiler

cryptogenic/ps5-ipv6-kernel-exploit

An experimental webkit-based kernel exploit (Arb. R/W) for the PS5 on <= 4.51FW

0vercl0k/cve-2021-31166

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.

berabuddies/redis-poc

RCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0, 8.8.1

ly4k/callbackhell

Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)

peterferrie/win-exec-calc-shellcode

A small, null-free Windows shellcode that executes calc.exe (x86/x64, all OS/SPs)

hacksysteam/cve-2023-21608

Adobe Acrobat Reader - CVE-2023-21608 - Remote Code Execution Exploit

maxpl0it/cve-2020-0674-exploit

This is an exploit for CVE-2020-0674 that runs on the x64 version of IE 8, 9, 10, and 11 on Windows 7.

hacksysteam/cve-2022-28672

Foxit PDF Reader Remote Code Execution Exploit

0xdevil/cve-2025-38001

CVE-2025-38001: Linux HFSC Eltree Use-After-Free - Debian 12 PoC

p0dalirius/cve-2022-21907-http.sys

Proof of concept of CVE-2022-21907 Double Free in http.sys driver, triggering a kernel crash on IIS servers