Tools

ac8999/cve-2025-32463

Python PoC for CVE-2025-32463, a local sudo privilege-escalation bug abusing --chroot to load attacker-controlled nsswitch.conf and spawn a root…

keyuraghao/cve-2025-20260

Python-based exploit for CVE-2025-20260 that generates a malicious PDF file and includes core dump analysis capabilities for vulnerability…

afifudinmtop/cve-2009-3999

Python exploit for HP Power Manager 4.2 buffer overflow, generating reverse TCP shellcode with msfvenom and executing remote code execution.

techcorp/cve-2025-8088-exploit

Proof-of-concept exploit for WinRAR CVE-2025-8088 that creates malicious RAR archives embedding payloads in Alternate Data Streams with path…

void0red/cve-2023-32233

Linux kernel privilege escalation exploit for CVE-2023-32233 using nft_quota UAF, ROP chain, and modprobe_path overwrite to gain root on kernels…

a1vinsmith/cve-2021-4034

Python proof-of-concept exploit for CVE-2021-4034 that abuses the SUID pkexec binary to escalate privileges and spawn an interactive root shell…

radoi-teodor/cve-2023-21768-dse-bypass

Windows kernel exploit for CVE-2023-21768 that bypasses Driver Signature Enforcement (DSE) to load unsigned drivers, enabling local privilege…

robbin0919/cve-2025-6019

Technical analysis and proof-of-concept for CVE-2025-6019, a local privilege escalation vulnerability in libblockdev and udisks2, enabling root…

mbanyamer/cve-2021-41579-lcds-laquis-scada-4.3.1.1085-arbitrary-file-write

Proof-of-concept exploit for CVE-2021-41579 enabling arbitrary file write/read and RCE via malicious .els project file in LAquis SCADA ≤4.3.1.1085.

lastvocher/7zip-cve-2025-11001

Python exploit for CVE-2025-11001 targeting 7-Zip on Windows, leveraging symlink creation to achieve code execution when 7-Zip runs with Admin…

c0deinblack/cve-2024-32019-poc

Proof-of-concept exploit for CVE-2024-32019 in Netdata ndsudo, enabling privilege escalation by adding SUID to /bin/bash.

y0n0y/cve-2018-8120-exp

Exploit for CVE-2018-8120, a Windows local privilege escalation vulnerability, targeting Win7 SP1 x86 and x64 systems.

adenkiewicz/cve-2017-9544

SEH BO based exploit for Easy Chat Server on Win 7 32b

tankist0x01/cve-2017-8869

Local SEH buffer overflow exploit for MediaCoder 0.8.48.5888 with reverse shell payload generation.

silent6trinity/looney-tuneables

Exploit for CVE-2023-4911 (Looney Tunables) targeting glibc ld.so privilege escalation with pwntools-based payload generation.

j0lama/cve-2017-11882

Python exploit for CVE-2017-11882, a buffer overflow in Microsoft Office Equation Editor, enabling remote code execution via crafted OLE objects.

estamelgg/cve-2023-0386-libs

C-based exploit for CVE-2023-0386 with static compilation and msfvenom-generated shellcode for privilege escalation on Linux systems.

syfi/cve-2024-53407

Proof-of-concept exploit demonstrating dylib injection in Phiewer 4.1.0 on macOS, leading to local command execution and potential unauthorized…