Tools

ianxtianxt/cve-2015-7501

Educational lab for understanding Java deserialization vulnerabilities with PoC exploits for JBoss CVEs, gadget chain analysis, and a vulnerable HTTP…

nccgroup/rustproofing-linux

Educational examples porting Linux kernel vulnerabilities to Rust, featuring intentionally vulnerable code and exploits for learning kernel security…

spawn451/cve-2025-8061-exploit

Exploit LnvMSRIO.sys vulnerable driver

eriknl/cve-2020-16152

Proof-of-concept exploit for CVE-2020-16152: LFI-to-RCE in Aerohive/Extreme Networks HiveOS via PHP string truncation and log poisoning, enabling…

bassamgraini/cve-2022-2588

Educational exploit for CVE-2022-2588, a Linux kernel race condition leading to privilege escalation. Includes Vagrant setup for a vulnerable machine…

elongl/cve-2014-3153

Linux kernel privilege escalation exploit for CVE-2014-3153 (Towelroot). Provides a working implementation to gain root access on vulnerable systems.

victoni/byovd-cve-2023-52271-poc

Exploit for CVE-2023-52271 in C++. The code exploits the vulnerable driver wsftprm.sys kernel driver 2.0.0.0, which allows kernel-level access to…

alalng/cve-2022-44789

Proof-of-concept exploit and writeup for CVE-2022-44789, a heap buffer overflow in MuJS JavaScript interpreter, including vulnerable version and…

aterror2be/cve-2020-14974

A simple POC that demonstrates A vulnerability found in IObitUnlocker 1.1.2 that leverages IOCTL codes found it its vulnerable driver…

1n53c/cve-2021-3156-poc

Heap-based buffer overflow exploit for CVE-2021-3156 in sudo, offering local privilege escalation to root on vulnerable Linux systems.

penteraio/cve-2022-23222-poc

Proof-of-concept exploit for CVE-2022-23222, a Linux kernel local privilege escalation via eBPF. Demonstrates ring buffer manipulation and map…

baka9moe/cve-2021-3156-exp

Exploit for CVE-2021-3156, a heap-based buffer overflow in sudo, enabling local privilege escalation to root on vulnerable systems.

george0papasotiriou/cve-2026-2222-mqtt-broker-connect-packet-heap-overflow

Demonstrates CVE-2026-2222 heap overflow in MQTT CONNECT packet handling with a simulated vulnerable broker and proof-of-concept exploit code for…

george0papasotiriou/cve-2026-7777-rust-use-after-free-in-unsafe-web-server

Demonstrates a Rust use-after-free in a web server with vulnerable code and a multithreaded trigger to show memory corruption and possible code…

shams-ul-mehmood/cve-2021-3156-project

Educational lab environment for CVE-2021-3156 (Baron Samedit) with a Dockerized vulnerable sudo target, exploit scaffold, canary test, root-cause…

mrr0b0t19/cve-2024-6387-exploit-poc

Proof-of-concept exploit for CVE-2024-6387 targeting vulnerable OpenSSH servers via heap manipulation and race condition to achieve remote code…

jangkrikkbozz/cve-2026-68138

Local privilege escalation exploit for Linux targeting CVE-2026-68138 to elevate privileges from unprivileged users to root on vulnerable systems.