Tools

hakaioffsec/cve-2024-21338

Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.

elttam/publications

Offensive security research hub aggregating original vulnerability advisories, CVE proof-of-concept exploits, conference talks, and internal tooling…

orange-cyberdefense/p3-loader

P³-Shellcode Loader is a loader that implements a code injection technique which leverages the Process Parameters structure as an execution and…

bazad/blanket

CVE-2018-4280: Mach port replacement vulnerability in launchd on iOS 11.2.6 leading to sandbox escape, privilege escalation, and codesigning bypass.

jas502n/cve-2018-17182

Linux kernel use-after-free (UAF) privilege escalation exploit for CVE-2018-17182, providing root shell access on affected kernels (3.16 to 4.18.8).…

canyie/cve-2024-0044

Proof-of-concept and writeup for bypassing the initial patch of CVE-2024-0044, an Android framework vulnerability enabling privilege escalation from…

lyrebirds/sagemcom-fast-3890-exploit

Exploit for Sagemcom F@ST 3890 cable modem implementing Cable Haunt vulnerability to achieve remote code execution via WebSocket-based buffer…

nu11secur1ty/windows11exploits

Collection of Windows 11 exploit proof-of-concepts and vulnerability demonstrations for security research and penetration testing.

0xrootpls/fritter

Polymorphic shellcode generator for in-memory execution of EXE, DLL, .NET, VBScript, and JScript with per-output and per-build randomization for…

voidsec/exploit-development

Exploit Development - Weaponized Exploit and Proof of Concepts (PoC)

xv0nfers/v8-sbx-bypass-collection

Curated collection of V8 sandbox escape, bypass, and violation reports with issue tracker links, articles, papers, slides, and design documents for…

bluefrostsecurity/cve-2019-1215

Local privilege escalation exploit for CVE-2019-1215, a use-after-free in ws2ifsl.sys, targeting Windows 10 19H1 x64 with kASLR, kCFG, and SMEP…

maxpl0it/cve-2020-0674-exploit

This is an exploit for CVE-2020-0674 that runs on the x64 version of IE 8, 9, 10, and 11 on Windows 7.

wh04m1001/cve-2023-36874

Proof-of-concept exploit for CVE-2023-36874, a Windows elevation of privilege vulnerability. Demonstrates exploitation on vulnerable Windows clients…

0x36/weightbufs

ANE kernel r/w exploit for iOS 15 and macOS 12

randorisec/cve-2022-34918-lpe-poc

Local privilege escalation exploit for CVE-2022-34918 targeting Linux kernel 5.15.0-39-generic via netfilter vulnerability. Includes a…

fortra/cve-2022-37969

Proof-of-concept exploit for CVE-2022-37969, a Windows Common Log File System driver local privilege escalation. Demonstrates heap spray, token…