Tools

toxy4ny/copy-fail

Copy Fail - CVE-2026-31431 - Hardened C implementation for redteam and authorized penetration testing operations. ⚠️ Legal Notice: This tool is…

0xcyberstan/cve-2026-42533-poc

CVE-2026-42533: pre-auth nginx heap overflow and info leak from PCRE capture clobbering in the map/script engine, chained to RCE.

flygonty/cve-2023-3390_poc

Proof-of-concept exploit for CVE-2023-3390, demonstrating a kernel vulnerability in Linux systems. Provides a working exploit for security testing…

maorbuskila/windows-x64-rat

Remote Access Trojan (RAT) for Windows x64 using a combination of vulnerability CVE-2023-38831 (WinRAR < 6.23 vulnerability) and Shellcode…

passwa11/cve-2024-6387-poc

Proof-of-concept exploit for CVE-2024-6387, a signal handler race condition in OpenSSH's sshd, enabling remote code execution on vulnerable servers.

livepwn/cve-2025-55616

Exploit for CVE-2025-55616, a local RCE in Zsh via history expression, achieving arbitrary code execution with user privileges.

tomadimitrie/cve-2026-54424

Exploiting Parsec for Windows to gain SYSTEM privileges

aratane/cve-2026-42945

A flaw was found in NGINX, specifically within the ngx_http_rewrite_module. An unauthenticated attacker can exploit this vulnerability by sending…

delspon/cve-2024-57376

CVE-2024-57376 exploit

reverseclabs/ibm-sterling-b2b-integrator-poc

PoC code for the LPE and RCE (CVE-2024-31903) attacks against the IBM Sterling B2B Integrator

sh4den/cve-2026-31431-copyfail-aarch64

Exploit for CVE-2026-31431 targeting aarch64 systems. Provides proof-of-concept code for vulnerability verification and security testing.

0xhaggis/cve-2021-35211

Serv-U-FTP CVE-2021-35211 exploit

crisprss/cve-2023-36874

CVE-2023-36874 Proof of Concept

wikiz/cve-2014-4113

Exploit for CVE-2014-4113, a local privilege escalation vulnerability in Windows kernel. Provides a proof-of-concept implementation for security…

alex14324/ssh_poc2024

An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server

y-f00l/cve-2020-14364

Ring0 exploit for CVE-2020-14364, providing kernel-level privilege escalation for penetration testing and vulnerability validation on affected…

sastraadiwiguna-purpleeliteteaming/llamastack-rce-deterministic-supply-chain-exploitation-hardening-framework-cve-2024-50050-

LlamaStack-RCE: Deterministic Supply Chain Exploitation & Hardening Framework [CVE-2024-50050] Focus on AI Security Research…