Tools

chompie1337/windows_mskssrv_lpe_cve-2023-36802

Local privilege escalation exploit for CVE-2023-36802 targeting Windows kernel streaming service (MSKSSRV) on Windows 11 22H2, using I/O Ring…

irql/cve-2021-31728

Public proof-of-concept for CVE-2021-31727 and CVE-2021-31728 demonstrating unrestricted disk read/write and arbitrary ring 0 code execution in…

penteraio/cve-2022-23222-poc

Proof-of-concept exploit for CVE-2022-23222, a Linux kernel local privilege escalation via eBPF. Demonstrates ring buffer manipulation and map…

jelasin/cve-2026-42945

Proof-of-concept exploit for CVE-2026-42945, a heap buffer overflow in NGINX's rewrite module enabling unauthenticated remote code execution via…

betalphafai/cve-2015-3636_crash

Crash PoC for CVE-2015-3636, a Linux kernel ping socket vulnerability, demonstrating a denial-of-service condition.

uname1able/cve-2025-21333

Proof-of-concept exploit for CVE-2025-21333, a heap-based buffer overflow in Hyper-V's vkrnlintvsp.sys leading to local privilege escalation via I/O…

majdae/cve-2025-47812-research

Academic research repository analyzing CVE-2025-47812, a critical RCE vulnerability in Wing FTP Server via Lua injection, including static/dynamic…

h1bana/cve-2023-21768

Proof-of-concept exploit for CVE-2023-21768, a Windows Ancillary Function Driver (AFD.sys) arbitrary kernel write vulnerability enabling local…

quantumworld-dpdns-io/cve-2026-42945

Full CVE-2026-42945 research repository with heap buffer overflow analysis, RCE exploit (heap spray + Feng Shui), detection scripts, and patching…

ludongxu/cve-2015-3636

Proof-of-concept exploit for CVE-2015-3636, a Linux kernel ping socket vulnerability enabling local privilege escalation.

bytereaper77/cve-2025-7795

Proof-of-concept exploit for a buffer overflow vulnerability in Tenda routers. Sends crafted unauthenticated POST requests to trigger a crash and…

star-sg/presentations

Curated collection of offensive security conference slide decks covering kernel and mobile exploitation, VM/container escapes, and…

yuvatia/page-table-exploitation

A demonstration of how page tables can be used to run arbitrary code in ring-0 and lead to a privesc. Uses CVE-2016-7255 as an example.

ricterz/pie-stack-clash-cve-2017-1000253

Demo-ing CVE-2017-1000253 in a container

gmh5225/dsark64

BYOVD proof-of-concept abusing the WHQL-signed DsArk64.sys driver for ring-0 process termination and kernel read/write via encrypted IOCTLs and…

maxime288/cve-2026-8838-rce

Educational PoC for CVE-2026-8838, a critical RCE vulnerability in Amazon Redshift Python Driver via unsafe eval() in vector_in(). Includes technical…