
OffensiveNim
My experiments in weaponizing Nim (https://nim-lang.org/)

My experiments in weaponizing Nim (https://nim-lang.org/)

Linux kernel privilege-escalation exploit for CVE-2026-46242, a race-condition use-after-free in epoll, with 99% reliable root on desktops, servers,…

Windows x64 handcrafted token stealing kernel-mode shellcode

Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.

WNF Code Execution Library Using C#

A variation of ProcessOverwriting to execute shellcode on an executable's section

Hijacks code execution via overwriting Control Flow Guard pointers in combase.dll

Simple POC library to execute arbitrary calls proxying them via NdrServerCall2 or similar

CVE-2018-4280: Mach port replacement vulnerability in launchd on macOS 10.13.5 leading to local privilege escalation and SIP bypass.

Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace (v8ctf submission)

Exploit for a LogMeIn/GoTo Windows kernel driver race condition that duplicates SYSTEM handles, enabling thread-token impersonation and local…


Python-based exploit for CVE-2021-21086 in Adobe Acrobat Reader DC, generating malicious PDFs with shellcode execution via crafted font charstrings.

PoC for CVE-2026-3609 - XIGNCODE3 xhunter1.sys handle leak enabling PPL bypass and LSASS dumping

Cisco RV110w UPnP stack overflow

Automated format string vulnerability exploitation tool for discovering stack, PIE, and canary leaks with flag search capability via %s or %p…

Python proof-of-concept for CVE-2023-21554 targeting Windows Message Queuing; crashes mqsvc.exe to demonstrate the vulnerability.

CVE-2024-24576 Proof of Concept