
lithium-kernel
Windows kernel-mode driver with user-mode client exposing IOCTL-based physical and virtual memory read/write, page table walking, pattern scanning,…

Windows kernel-mode driver with user-mode client exposing IOCTL-based physical and virtual memory read/write, page table walking, pattern scanning,…

Ghidra Extension to integrate BinDiff for function matching

PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.

Proof-of-concept exploit for CVE-2026-68376 in Ubuntu kernel 7.0.0-30, leveraging SCTP chunk handling and PTE manipulation to escalate privileges to…

Exploit chain research targeting CVE-2026-43499 on Samsung Galaxy S21

Kernel Process Termination Tool ( CVE-2026-0828 exploit)

C port of a proof-of-concept exploiting a Linux kernel AF_ALG AEAD splice logic flaw (CVE-2026-31431) for educational research.

Project Date : Feb 2026 / Memory corruption vulnerability within the kernel driver of MiniTool. Demonstrates a debugger-assisted arbitrary kernel…

Rust PoC for a Linux kernel local privilege escalation vulnerability, exploiting the Crypto API and splice to overwrite page cache and modify…

Proof-of-concept exploit for CVE-2025-32463, a sudo chroot privilege escalation vulnerability, demonstrating arbitrary shared object loading to gain…

Proof-of-concept for CVE-2026-21508, demonstrating a DLL hijacking attack on Windows 11 that escalates privileges by loading a crafted DLL into…

CVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)


A curated list of resources (books, tutorials, courses, tools and vulnerable applications) for learning about Exploit Development

kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices.

Toolkit to weaponize Chromium vulnerabilities into reliable, cross-platform, full-chain exploits

A fully implemented kernel exploit for the PS4 on 5.05FW
