
prefetch-tool
Windows KASLR bypass using prefetch side-channel

Windows KASLR bypass using prefetch side-channel

My proof-of-concept exploits for the Linux kernel

Exploit for nginx heap buffer overflow (CVE-2026-42533) providing pre-auth RCE via two-pass capture clobbering. Includes info leak, heap spray, and…

Exploit for CVE-2017-2370, a macOS/iOS kernel heap overflow in mach_voucher_extract_attr_recipe_trap, enabling local privilege escalation via crafted…

A buffer overflow vulnerability in the XNU kernel's ICMP error code causes IOS devices to crash (laptops and mobiles).

Exploit code for VirtualBox 6.0.0 escape using CVE-2019-2525 memory leak and CVE-2019-2548 heap overflow to execute arbitrary commands on the host…

Proof-of-concept exploit for CVE-2017-0785, an Android Bluetooth stack remote code execution vulnerability. Enables testing and verification of the…

Proof-of-concept exploit for CVE-2025-53136, a Windows NT OS kernel information disclosure vulnerability triggered via a race condition, enabling…

Python exploit for CVE-2024-55557 targeting Weasis 4.5.1, enabling local and remote file retrieval from vulnerable systems.

Proof-of-concept exploit for CVE-2022-1011, a Linux kernel information leak in FUSE via splice, demonstrating memory disclosure from client to server…

Exploit for CVE-2024-12085 information leak in rsync, with hardcoded target module and checksums, plus auxiliary traffic capture and heap testing…

Python-based proof-of-concept exploit for CVE-2023-2636, demonstrating a specific vulnerability with code for testing and verification in controlled…

Wrapper for CVE-2022-4543 exploit that de-randomizes kernel base address via KASLR bypass, enabling reliable kernel exploitation on affected Linux…

Python-based exploit for CVE-2022-44268, an arbitrary file read vulnerability in ImageMagick. Poisons PNG images to read sensitive files from…

Remote code execution exploit for CVE-2019-0708 (BlueKeep) targeting Windows 7 and Server 2008 R2 via RDP, with kernel pool manipulation PoCs and…


Research tool for CVE-2025-49144, providing vulnerability analysis and exploitation capabilities for security testing and assessment.

Shell-based checker for CVE-2024-1086 vulnerability, enabling rapid detection and verification of this specific exploit in target environments.