
pwnkit
Exploit for CVE-2021-4034, a memory corruption vulnerability in pkexec of polkit, enabling local privilege escalation to root on Linux systems.

Exploit for CVE-2021-4034, a memory corruption vulnerability in pkexec of polkit, enabling local privilege escalation to root on Linux systems.

PoC CVE-2025-22457

Proof-of-concept exploit for CVE-2023-26976, a stack overflow vulnerability in Tenda AC6 routers, enabling remote code execution via crafted HTTP…

A number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast

Exploit setup for CVE-2025-7545 targeting vulnerable Binutils in firmware environments, including environment configuration and PDF documentation.

Exploitation of VirtualBox vulnerability (https://nvd.nist.gov/vuln/detail/CVE-2018-3295)

Kernel source repository with modifications addressing CVE-2022-0492, providing a patched or vulnerable environment for security research and…

Proof-of-concept exploit for a buffer overflow vulnerability in Tenda AC8v4 router firmware (V16.03.34.09) via the SetNetControlList endpoint,…

CVE-2019-18655 metasploit module. SEH based buffer overflow in file sharing wizard app v.1.5.0.

Exploit for CVE-2021-4034, a local privilege escalation in polkit's pkexec, providing root access on Linux systems.

Proof-of-concept exploit for CVE-2022-30040, a stack buffer overflow in Tenda AX1803 router firmware causing denial-of-service via the SetSysTimeCfg…

Exploit for CVE-2003-0264 based on pwntools and metasploit's windows/reverse_tcp

An implementation of a proof-of-concept for CVE-2018-5767

Rust implementation of the CVE-2021-4034 pkexec privilege escalation exploit, with scripts to download and unpack a vulnerable pkexec for testing.

Proof-of-concept exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. Demonstrates exploitation and…

Linux kernel source tree modified to demonstrate or patch CVE-2022-45934, providing a basis for vulnerability analysis and exploitation research.

Proof-of-concept exploit for CVE-2023-25234, a stack overflow vulnerability in Tenda AC6 routers, enabling remote code execution via crafted HTTP…

Interactive PoC suite for CVE-2014-9222 (Misfortune Cookie) and related router exploits, featuring detection, auth bypass, DoS, and RCE modules with…