Tools

c0mposer/c-game-modding-utility

A game modding utility that makes injecting C/C++ code easier.

ebux/cable-modems

Black-box security evaluation of five ISP cable modem/router gateways, analyzing firmware images and documenting 35+ vulnerabilities including…

rva3/cve-2026-40003

Exploit for CVE-2026-40003, an arbitrary memory write vulnerability in ZXIC/Sanechips ZX297520V3 SoC BootROM, enabling code execution via USB…

hdbreaker/cve-2018-16119

TP-Link TL-WR1043ND - Authenticated Remote Code Execution

cvonkleist/vxworks_hash

code to reverse vxworks 5.x password hashes

watchtowrlabs/watchtowr-vs-sonicwall-preauth-rce-chain

PoC exploit chain for pre-authentication remote code execution on SonicWall SMA 100 appliances exploiting CVE-2023-44221 and CVE-2024-38475.

secforce/cve-2018-8941

D-Link DSL-3782 Code Execution (Proof of Concept)

otsmane-ahmed/cve-2025-2620-poc

Proof-of-concept exploit for CVE-2025-2620, a critical stack-based buffer overflow in D-Link DAP-1620 routers enabling unauthenticated remote code…

vl4dr/cve-2024-42642

Proof-of-concept exploits for three vulnerabilities in Crucial MX500 SSD firmware update mechanism, enabling buffer overflows and potential code…

dest-3/cve-2023-46012

LINKSYS AC1900 EA7500v3 IGD UPnP Stack Buffer Overflow Remote Code Execution Vulnerability

bishopfox/you-re-doing-iot-rng

Results and device code from the DEF CON 29 presentation "You're Doing IoT RNG"

secforce/cve-2021-37748

Exploit code for CVE-2021-37748 targeting Grandstream HT801 ATA, demonstrating remote code execution via crafted HTTP requests.

yt2w/cve-2025-9961

Exploit for TP-Link AX10/AX1500 stack buffer overflow in CWMP (TR-069) enabling remote code execution via ret2libc with ASLR bypass. Includes…

lakwsh/cve-2020-8597

Exploit for CVE-2020-8597 targeting RM2100 routers, providing proof-of-concept code for remote code execution via buffer overflow in the router's web…

heapframe/seetong-ts81xxd3x-rce

CVE-2026-100886 | Unauthenticated Remote Code Execution toolkit.

full-disclosure/cve-2021-44827

Proof-of-concept exploit for authenticated remote code execution (CVE-2021-44827) targeting TP-Link Archer C20i routers. Provides post-exploitation…

hunt-benito/mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

Proof-of-concept exploit for CVE-2026-20452, a heap-based buffer overflow in MediaTek WLAN AP drivers. Uses scapy to send crafted Wi-Fi management…