Tools

klezvirus/koppeling-p

Adaptive DLL hijacking / dynamic export forwarding - EAT preserve

flowerwind/autogeneratexalanpayload

cve-2022-34169 延伸出的Jdk Xalan的payload自动生成工具，可根据不同的Jdk生成出其所对应的xslt文件

siberas/cve-2016-3309_reloaded

Exploits for the win32kfull!bFill vulnerability on Win10 x64 RS2 using Bitmap or Palette techniques

mbanyamer/cve-2025-30397---windows-server-2025-jscript-rce-use-after-free-

Proof-of-concept exploit for CVE-2025-30397, a Use-After-Free vulnerability in JScript.dll enabling remote code execution on Windows Server 2025 via…

kristal-g/cve-2021-40449_poc

Proof-of-concept exploit for CVE-2021-40449, a Windows kernel privilege escalation vulnerability in win32k, featuring ROP chain and custom shellcode…

maxpl0it/cve-2019-17026-exploit

An exploit for CVE-2019-17026. It pops xcalc and was tested on Ubuntu (x64).

itaymigdal/pichichih0ll0wer

Nim-based process hollowing loader for PE executables with configurable injection methods, direct/indirect syscalls, anti-debug, payload encryption,…

xnuvers007/cve-2023-21716

Proof-of-concept exploit for CVE-2023-21716, a Microsoft Word RTF parsing vulnerability, causing a crash on Windows 10 with Python 3.11.

goichot/cve-2020-3433

PoCs and technical analysis for three Cisco AnyConnect Windows vulnerabilities: local privilege escalation (CVE-2020-3433), denial of service…

hexx0r/cve-2016-0051

Proof-of-concept exploit for CVE-2016-0051 (MS16-016) achieving local privilege escalation to SYSTEM on Windows 7, with compiled binaries and…

spiralbl0ck/cve-2024-40431-cve-2022-25479-eop-chain

Exploit chain combining CVE-2024-40431 and CVE-2022-25479 for privilege escalation via data-only attack, adapted from public PoCs.

0xilis/cve-2024-27876

Generates a proof-of-concept exploit for CVE-2024-27876, a libAppleArchive vulnerability, with technical write-up and implementation details.

forrest-orr/wizardopium

Exploit for a use-after-free vulnerability in Google Chrome (CVE-2019-13720) with standalone shellcode payload for browser code execution.

hackerhouse-opensource/cve-2021-34527

Weaponized Windows LPE exploit for CVE-2021-34527 using AddPrinterDriverEx() to escalate a DLL to SYSTEM with automatic artifact cleanup. Supports…

feliam/cve-2013-2729

Python-based exploit generator for Adobe Reader BMP/RLE heap corruption (CVE-2013-2729). Demonstrates arbitrary code execution via malicious BMP…

paradoxis/cve-2026-57239

Proof-of-concept exploit for Foxit PDF Reader LPE vulnerabilities (CVE-2026-3775/3780/57239) that escalates privileges to NT AUTHORITY\SYSTEM via the…

synacktiv/exim-cve-2019-15846

Proof-of-concept exploit for CVE-2019-15846, a heap overflow in Exim mail server. Includes Python script to generate crafted spool header files and…

easis/cve-2018-20250-winrar-ace

Proof of concept code in C# to exploit the WinRAR ACE file extraction path (CVE-2018-20250).