
gtfobins-cli
Search for Unix binaries that can be exploited to bypass system security restrictions.

Search for Unix binaries that can be exploited to bypass system security restrictions.

Technical analysis of CVE-2020-1206 (SMBleed) kernel information disclosure vulnerability in Windows SMBv3, including unauthenticated memory leak…

Exploit for CVE-2024-12085 Infoleak

Exploit for CVE-2010-3904, a Linux kernel privilege escalation vulnerability. Provides a proof-of-concept implementation for local privilege…

Proof-of-concept exploit for CVE-2020-3766, an Adobe Integrity Service vulnerability. Provides technical details and advisory references for security…

Documents the VectorFreed librsvg use-after-free RCE chain (CVE-2026-96889) with an SVG generator PoC and remediation guidance for librsvg, Next.js,…

open-source jailbreaking tool for many iOS devices

Public exploit repository covering local privilege escalation, buffer overflows, and database exploits across Linux, Solaris, AIX, OpenBSD, Zyxel,…

Exploit for nginx heap buffer overflow (CVE-2026-42533) providing pre-auth RCE via two-pass capture clobbering. Includes info leak, heap spray, and…

on Mac 10.12.2

CVE-2018-4185: iOS 11.2-11.2.6 kernel pointer disclosure introduced by Apple's Meltdown mitigation.

My proof-of-concept exploits for the Linux kernel

Leaking kernel addresses from ETW consumers. Requires Administrator privileges.

Exploit analysis for CVE-2014-4378: information disclosure in Apple CoreGraphics via crafted PDF, enabling memory layout leak and bypass of ASLR,…

CVE-2026-42945 Nginx Rift

Proof-of-concept exploit for Linux kernel FUSE information leak (CVE-2024-44947), demonstrating beyond-EOF memory disclosure via mmap and including…

Proof-of-concept exploit for CVE-2024-23208, targeting a specific vulnerability in Apple platforms. Provides a test case for security researchers and…

Spectre exploit