
InflativeLoading
Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.

Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.

Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.

Bootkit for Windows Sandbox to disable DSE/PatchGuard.

Rust AMD SVM hypervisor framework with customizable vmexit handlers (MSR, CPUID, RDTSC) and NPT hooking for kernel-level monitoring and research.

Local PE injection technique using hardware breakpoints and vectored exception handling to manipulate DLL loading and execute arbitrary payloads, as…

CVE-2025-56383-Proof-of-Concept

Proof-of-concept exploit for CVE-2018-4878, a Use-After-Free vulnerability in Adobe Flash Player 32-bit, providing a ByteArray object for process…

Kernel Process Termination Tool ( CVE-2026-0828 exploit)

CVE-2017-4878 Samples - http://blog.talosintelligence.com/2018/02/group-123-goes-wild.html

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

This is working POC of CVE-2022-36271

A simple PoC demonstrating the vulnerability in the ThrottleStop.sys driver, showcasing arbitrary physical memory read and write capabilities, as…

Reproduction of CVE-2023-34312 using two malicious DLL files to exploit QQ and TIM messaging applications for security research and testing.

Exploit for CVE-2026-21509, a Microsoft Office OLE validation bypass using a speculative race-condition technique to evade AMSI/EDR and achieve code…

Use cve-2026-36425 killer edr,360 can killer

Proof-of-Concept for CVE-2025-8088 vulnerability in WinRAR (path traversal via ADS)

Stack overflow in LibXMP

Proof-of-concept exploit for CVE-2025-20260, a buffer overflow in ClamAV's PDF scanning. Includes a Python script to generate a malicious PDF and…