Tools

penteraio/cve-2022-23222-poc

Proof-of-concept exploit for CVE-2022-23222, a Linux kernel local privilege escalation via eBPF. Demonstrates ring buffer manipulation and map…

phvilasboas/cve-2021-4034

Exploit for CVE-2021-4034, a local privilege escalation in polkit's pkexec, providing a root shell via a shared library and GCONV_PATH manipulation.

joeammond/cve-2021-4034

Python exploit for CVE-2021-4034 (PwnKit) that escalates privileges to root via pkexec, generating a root shell with msfvenom payloads.

nhh9905/cve-2026-62735

Proof-of-concept for CVE-2026-62735, an integer overflow in http.sys leading to heap overflow and SYSTEM shell. Includes crash log and stack trace…

imbas007/cve-2026-42533

Exploit for nginx heap buffer overflow (CVE-2026-42533) providing pre-auth RCE via two-pass capture clobbering. Includes info leak, heap spray, and…

petergottesman/pwnkit-exploit

Local privilege escalation exploit for CVE-2021-4034 in pkexec, providing a proof-of-concept that drops a root shell on vulnerable systems.

peterpan0927/tfc-chrome-v8-bug-cve-2021-38001-poc

Proof-of-concept exploit for CVE-2021-38001, a Chrome V8 JavaScript engine vulnerability. Demonstrates exploitation via d8 shell with a malicious…

gracecondition/dirtyslide

Local privilege escalation exploit for macOS XNU kernel (CVE-2026-43724) that uses an out-of-bounds write in dyld shared-cache slide walk to gain a…

otsmane-ahmed/cve-2025-2620-poc

Proof-of-concept exploit for CVE-2025-2620, a critical stack-based buffer overflow in D-Link DAP-1620 routers enabling unauthenticated remote code…

lakshmidesai/cve-2016-8655

Linux kernel local privilege escalation exploit for CVE-2016-8655, targeting AF_PACKET race condition on Ubuntu 16.04 x86_64 to gain root shell via…

smozy92/cve-2019-11932

Exploit for CVE-2019-11932, a WhatsApp GIF remote code execution vulnerability. Compile and run to trigger the exploit and gain a reverse shell.

wesmar/cve-2026-31431

Working proof-of-concept exploit for CVE-2026-31431, a Linux kernel local privilege escalation via AF_ALG AEAD page cache corruption, granting root…

sysmancer/cve-2025-32463

Proof-of-concept exploit for CVE-2025-32463, a sudo chroot escape vulnerability, allowing unprivileged users to gain a root shell outside the chroot…

fkshield/cve-2025-5548

End-to-end exploitation lab for CVE-2025-5548 (FreeFloat FTP Server stack buffer overflow). Includes static analysis with IDA/Ghidra, binary fuzzing,…

nu11secur1ty/0

Exploit for a Windows Defender race condition that escalates to SYSTEM via use-after-free, crashes MsMpEng.exe, spawns a hidden shell, and persists…

h3x0v3rl0rd/ms08-067

Python-based exploit for MS08-067 (CVE-2008-4250) providing remote code execution via SMB with reverse shell payload generation and automatic target…

itmarcin2211/cve-2022-0847-dirtypipe-exploit

Proof-of-concept exploit for CVE-2022-0847 (Dirty Pipe) that overwrites root's password field in /etc/passwd to pop a root shell, with automatic…