Tools

hasherezade/process_overwriting

PE injection technique that overwrites a suspended process's executable with a payload, enabling code execution under a benign process identity.

hexx0r/cve-2016-0051

Proof-of-concept exploit for CVE-2016-0051 (MS16-016) achieving local privilege escalation to SYSTEM on Windows 7, with compiled binaries and…

7bitsteam/exch_cve-2021-42321

Modified .NET deserialization payload for CVE-2021-42321, based on ysoserial.net, that writes files and bypasses Windows Defender to target Microsoft…

fm0ss/cve-2025-9951-ffmpeg-jp2-poc

Proof-of-concept for CVE-2025-9951 demonstrating controlled callback execution in FFmpeg via JPEG 2000 component-mapping mismatch. Includes write-up,…

thomasgeens/cve-2021-1675

PowerShell exploit for CVE-2021-1675 (PrintNightmare) performing local privilege escalation via Print Spooler, with custom DLL payload injection to…

netw0rk7/cve-2026-3888-poc

Proof-of-concept exploit for CVE-2026-3888, including a shared library payload compiled with gcc for vulnerability demonstration.

minq0x1412/cve-2025-53024

C-based proof-of-concept exploit for CVE-2025-53024, demonstrating a specific vulnerability with a targeted payload for security testing and…

helios973/cve-2026-31431_exp.c

C exploit for CVE-2026-31431 providing privilege escalation through a custom binary payload. Designed for testing and validation of the vulnerability.

vinicius-batistella/cve-2025-65741

Proof-of-concept for CVE-2025-65741 demonstrating dylib injection in Sublime Text 3 on macOS via unsigned code, with a compiled .dylib payload and…

whoami-chmod777/cve-2021-1675-cve-2021-34527

PowerShell exploit for PrintNightmare (CVE-2021-1675) performing local privilege escalation via Print Spooler, with custom DLL payload injection to…

incredible1yu/cve-2017-7494

C exploit for CVE-2017-7494 (Samba is_known_pipename) with custom shared object compilation and reverse shell payload generation.

nikip72/cve-2021-4034

Statically linked implementation of the CVE-2021-4034 privilege escalation exploit, with encoded payload written to disk and no gcc dependency.

aus-mate/cve-2021-4034-poc

Proof-of-concept exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec. Compiles and runs a C payload to…

arnoldqqq/cve-2020-27955

Exploit for CVE-2020-27955, a Git LFS remote code execution vulnerability, with a .bat/powershell payload targeting Windows Git clients.

kimorea/cve-2020-27955-lfs

Windows RCE exploit for CVE-2020-27955 targeting git-lfs, affecting GitHub Desktop, VS Code, and other Git clients via crafted .bat/powershell…

jezzus/cve-2018-4121

Proof-of-concept remote code execution exploit targeting Safari 11.0.3 on macOS 10.13.3 via a WebAssembly section vulnerability (CVE-2018-4121).…

czeti/baron-samedit

This repository contains a Proof-of-Concept (PoC) exploit for the Baron Samedit vulnerability (CVE-2021-3156). The exploit demonstrates privilege…