Tools

octoberfest7/cve-2023-36874_bof

Weaponized CobaltStrike BOF for CVE-2023-36874 Windows Error Reporting LPE

genericcoding/pois0nsword

A demonstration of read write using cve-2025-43529 and userland PAC bypass on iOS 26.1

y3a/cve-2023-28229

Proof-of-concept exploit for Windows CNG KeyIso RPC elevation of privilege and sandbox escape, demonstrating exploitation of CVE-2023-28229.

oxfemale/cve-2026-20817

Proof-of-concept exploit for CVE-2026-20817, a local privilege escalation in Windows Error Reporting (WER) via ALPC, allowing low-privileged users to…

moiz-2x/cve-2025-24990_poc

Proof of Concept CVE-2025-24990 (Agere Systems's driver)

ynwarcs/cve-2023-24871

pocs & exploit for CVE-2023-24871 (rce + lpe)

kungfulon/nf-tables-lpe

Linux kernel privilege escalation exploits targeting Netfilter's nf_table module, developed by Team Orca for multiple CVEs.

apkc/cve-2024-26229-bof

BOF implementations of CVE-2024-26229 for Cobalt Strike and BruteRatel

iss4cf0ng/cve-2026-31431-linux-copy-fail

Rust-based local privilege escalation exploit for CVE-2026-31431, enabling execution of custom shellcode such as Meterpreter on Linux systems.

crihexe/copy-fail-tiny-elf-cve-2026-31431

Minimal no-libc Linux x86_64 ELF PoC build for Copy Fail (CVE-2026-31431)

geosn0w/cve-2025-24203-ios-exploit-with-error-logging

Slightly improved exploit of the CVE-2025-24203 iOS vulnerability by Ian Beer of Google Project Zero

c3c/cve-2021-4034

Precompiled multi-architecture exploit for CVE-2021-4034 (pkexec LPE) that drops a shared object to gain root privileges, with build scripts for…

m-cetin/cve-2023-29336

Proof-of-concept exploit for CVE-2023-29336, a Win32k elevation of privilege vulnerability enabling SYSTEM-level access on affected Windows systems.

doyensec/ksmbd-cve-2025-37947

Exploit for CVE-2025-37947 in ksmbd, a Linux kernel SMB server, causing an out-of-bounds write. Includes BPF tracer, QEMU setup, and minimal PoC…

alihzsec/cve-2026-31431

Proof-of-concept exploit for CVE-2026-31431, a Linux local privilege escalation vulnerability, demonstrating kernel exploitation for educational and…

h4rk3nz0/cve-2023-20598-pdfwkrnl

CVE-2023-20598 Kernel Driver - Elevation of Privilege

r1l4-i3pur1l4/cve-2022-21882

Win32k elevation of privilege exploit for CVE-2022-21882, providing a proof-of-concept implementation targeting Windows kernel vulnerabilities.