KnockGiga
mein-0/knockgigaProof-of-concept local privilege escalation exploiting Gigabyte gdrv3.sys IOCTLs to write the SYSTEM token into a user process via an unchecked…
binary-exploitationexploitationhardware-security+3
3
mein-0/knockgigaProof-of-concept local privilege escalation exploiting Gigabyte gdrv3.sys IOCTLs to write the SYSTEM token into a user process via an unchecked…
spydomain/cve-2021-22555-pocHeap overflow exploit for CVE-2021-22555 achieving local privilege escalation to root on Ubuntu 20.04 with kernel 5.8.0-48.
tracyliving606/regpwnExploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions
zeromemoryex/cve-2025-26125( 0day ) Local Privilege Escalation in IObit Malware Fighter
0xblackash/cve-2026-68121Research repository for CVE-2026-68121, a Linux kernel PPPoE use-after-free in pppoe_sendmsg() enabling local privilege escalation, with PoC,…
0xblackash/cve-2026-81000Research repository for CVE-2026-81000 (TUNderflow), a Linux kernel TUN/TAP receive headroom integer underflow enabling local privilege escalation,…
0xblackash/cve-2026-80844Research repository for CVE-2026-80844 (DirtyAH6), a Linux kernel IPv6 AH6/XFRM local privilege escalation, with PoC, root-cause and patch analysis.
do4choo/cve-2026-53694-nomachine-lpeProof-of-concept exploit and write-up for CVE-2026-53694, a local privilege escalation in NoMachine for Linux via argument injection in nxchmod.sh,…
haitam-lazaar/libextractor-privescProof-of-concept for CVE-2026-100310, a local privilege escalation in GNU libextractor ≤1.15 via the LIBEXTRACTOR_PREFIX untrusted search path, with…
mein-0/gvcidrv64Proof-of-concept exploit for Gigabyte's GVCIDrv64.sys kernel driver, achieving local privilege escalation via arbitrary physical memory and I/O port…
nbs32k/localstrangerPoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.
imeiplus/cve-2026-23111-pocWorking local privilege escalation exploit for CVE-2026-23111, a use-after-free in the Linux kernel nf_tables subsystem, with KASLR bypass and ROP…
abraxas/cve-2025-38502-linux-lpeResearch repository for CVE-2025-38502, a Linux kernel BPF cgroup local storage out-of-bounds access via tail calls enabling local privilege…
minime794/copyfailLinux local privilege escalation exploit for CVE-2026-31431, overwriting page cache of SUID binaries via the AF_ALG kernel crypto API to gain root…
manizada/diagspillLocal privilege escalation PoC for CVE-2026-74469, exploiting an SCTP diagnostic-reply kernel memory corruption to gain root on Linux x86-64 systems.
manizada/pppoejectLinux kernel local privilege escalation PoC for CVE-2026-68121, chaining PPPoE, FUSE, and IP6GRE to corrupt kernel memory and gain root.
manizada/tunderflowPython PoC for CVE-2026-81000, a Linux kernel local privilege escalation via TUN/OVS out-of-bounds write and pipe_buffer flag manipulation to gain…
ccp-p/ghostlock-cve-2026-43499-4.19-k40Android kernel LPE PoC for CVE-2026-43499, an rtmutex use-after-free in 4.19 Qualcomm kernels, adapted for Redmi K40 with LD_PRELOAD root payload.