Tools

cloudfuzz/android-kernel-exploitation

Hands-on workshop for learning Android kernel vulnerability analysis and exploitation, with Docker-based build environment and practical exercises.

anyaschukin/override

Binary Exploitation and Reverse-Engineering (from assembly into C)

niklasb/libc-database

Build a database of libc offsets to simplify exploitation

io12/pwninit

Automates setup of binary exploitation challenges by patching ELF binaries, fetching matching linkers, unstripping libc, and generating pwntools…

phoenhex/files

Curated repository of exploits, proof-of-concept code, and vulnerability research presentations from the phoenhex team, focused on binary…

markakd/dirtycred

Kernel exploitation technique

malvuln/ransomlord

RansomLord is a proof-of-concept Anti-Ransomware exploitation tool that automates the creation of PE files, used to compromise ransomware…

xv0nfers/v8-sbx-bypass-collection

Curated collection of V8 sandbox escape, bypass, and violation reports with issue tracker links, articles, papers, slides, and design documents for…

yardenshafir/ioringreadwriteprimitive

Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2

wh04m1001/cve-2023-36874

Proof-of-concept exploit for CVE-2023-36874, a Windows elevation of privilege vulnerability. Demonstrates exploitation on vulnerable Windows clients…

hakumarachi/bropper

An automatic Blind ROP exploitation tool

tijme/amd-ryzen-master-driver-v17-exploit

Cobalt Strike (CS) Beacon Object File (BOF) for kernel exploitation using AMD's Ryzen Master Driver (version 17).

y3a/cve-2023-28229

Proof-of-concept exploit for Windows CNG KeyIso RPC elevation of privilege and sandbox escape, demonstrating exploitation of CVE-2023-28229.

live-ctf/livectf-defcon30

Collection of DEF CON 30 CTF challenge binaries, build scripts, and solve scripts for practicing binary exploitation and reverse engineering.

kiks7/cve-2022-2602-kernel-exploit

C exploit for CVE-2022-2602, a use-after-free in the Linux kernel's io_uring subsystem, enabling local privilege escalation through file descriptor…

mistymntncop/cve-2024-5274

Exploit for CVE-2024-5274, a Chrome V8 DCHECK bytecode mismatch vulnerability that provides out-of-bounds read/write primitives for browser…

jir4vv1t/cve-2025-43529

Technical exploit for CVE-2025-43529, a WebKit DFG JIT compiler vulnerability enabling use-after-free via missing store barrier in concurrent GC,…