CVE-2021-4034
n1et/cve-2021-4034Shell script that exploits CVE-2021-4034 (PwnKit) for local privilege escalation, intended for CTF use.
ctfexploitationpenetration-testing+2
n1et/cve-2021-4034Shell script that exploits CVE-2021-4034 (PwnKit) for local privilege escalation, intended for CTF use.
webgoat/webgoatDeliberately vulnerable web application with interactive lessons and challenges for learning web application security and penetration testing…
s0ld13rr/pentestcodeAutonomous AI penetration testing agent that orchestrates multi-agent recon, exploitation, post-exploitation, and reporting with persistent…
abedallarawashdeh/htb-twomillion-machineHack The Box TwoMillion machine writeup — JWT/invite-code bypass, IDOR, command injection, and CVE-2023-0386 privilege escalation.
t3l3machus/pentest-pivotingA compact guide to network pivoting for penetration testings / CTF challenges.
dere-ad2001/frida-labsThe repo contains a series of challenges for learning Frida for Android Exploitation.
sachinart/cve-2026-60004-gitea-0dayCVE-2026-60004 — Gitea <= 1.27.0 Pre-Auth RCE
gbuyssens/cve-2026-41651Local privilege escalation via TOCTOU race condition in PackageKit's.
paradoxis/flask-unsignCommand line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.
r3tr074/exploitsPersonal collection of exploits including n-days, 0-days, CTFs, kernel and browser vulnerabilities for security research and penetration testing.
al1ex/awesome-pentestCollection of penetration testing tools
bishopfox/cloudfoxableCreate your own vulnerable by design AWS penetration testing playground
javokhir-sec/cve-poc-hub🛡️ CVE Proof-of-Concept Hub — 4 PUBLISHED CVEs · 5 under review (VulnCheck) · SuiteCRM batch withdrawn
agampreet-singh/redrootRedRoot is a Python-based, CLI-driven offensive security framework that brings essential red teaming tools into one unified terminal environment.…
infobyte/eko2020-challengeCapture-the-flag challenge for Ekoparty 2020 featuring a Flask web application with security vulnerabilities to exploit. Designed for hands-on…
foxyproxys/cve-2023-52654Automated privilege escalation script exploiting misconfigured setuid/sgid binaries, sudo, cron, and LD_PRELOAD on Unix systems. Designed for CTF and…
j-jaeyoung/bad-epollLinux kernel privilege-escalation exploit for CVE-2026-46242, a race-condition use-after-free in epoll, with 99% reliable root on desktops, servers,…
nu11secur1ty/oscpLab materials and practice resources for OSCP certification preparation, including penetration testing exercises and hands-on security training…