Tools

rwxstoned/ldrshuffle

Code execution/injection technique using DLL PEB module structure manipulation

klezvirus/rpcproxyinvoke

Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar

jymcheong/injection

Windows process injection methods

restdone/cve-2024-31771

Proof-of-concept exploit for CVE-2024-31771 demonstrating arbitrary file write in TotalAV via symbolic link attack, enabling DLL planting and SYSTEM…

muhammad-ali007/localpotato_cve-2023-21746

Proof-of-concept exploit for Windows local privilege escalation (CVE-2023-21746) abusing NTLM local authentication to gain SYSTEM privileges via SMB…

hadimed/kingsoft-wps-office-lpe

CVE-2022-25943

tomadimitrie/cve-2026-54424

Exploiting Parsec for Windows to gain SYSTEM privileges

q1uf3ng/cve-2025-47962-poc

Proof-of-concept for CVE-2025-47962 demonstrating local privilege escalation via DLL hijacking in Windows IpOverUsbSvc service due to insecure…

pamoutaf/cve-2024-34329

Proof-of-concept exploit for a local privilege escalation vulnerability in Datacard XPS Card Printer Driver via insecure file permissions and DLL…

refi64/cve-2020-25265-25266

Proof-of-concept exploit demonstrating CVE-2020-25265 and CVE-2020-25266, using a crafted MP3 file to achieve arbitrary code execution via…

manhndd/cve-2019-6329

Local Privilege Escalation in HP Support Assistant

t43wiu6/cve-2019-0887

exp for CVE-2019-0887

spaceplant/upnphostfileread

Arbitrary file read exploit for the Windows UPnP Device Host service.

s3cur3th1ssh1t/nimsyscallpacker

Packs C# assemblies, PE files, or shellcode into encrypted Nim binaries with advanced evasion features including AMSI/ETW bypass, sandbox detection,…

int0/cve-2015-1769

Proof-of-concept exploit for CVE-2015-1769 using a crafted VHD file and symbolic link to trigger a Windows privilege escalation via Mount Manager.

eriknl/cve-2020-16152

Proof-of-concept exploit for CVE-2020-16152: LFI-to-RCE in Aerohive/Extreme Networks HiveOS via PHP string truncation and log poisoning, enabling…

cwjchoi01/cve-2024-57394

Proof-of-concept exploit for CVE-2024-57394: low-privilege file restoration to System32 enabling DLL hijacking and local privilege escalation to…

carsonchan12345/cve-2024-37726-msi-center-local-privilege-escalation

Proof-of-concept for CVE-2024-37726: local privilege escalation in MSI Center via arbitrary file overwrite using symlink/junction attacks and OpLock…