Tools

eddinos2/cve-2026-64705

Root-cause analysis and proof-of-concept for CVE-2026-64705, a macOS HFS xattr kernel heap overflow. Includes weaponized HFS+ image, patcher, parser,…

eddinos2/cve-2026-64747

Root-cause analysis and reachability PoC for CVE-2026-64747, a buffer overflow in the AppleAVE2 kernel extension. Includes reversed IOKit wire…

quyicheng03-boop/xiaomi15-dada-cve-2026-64560

Device-bound CVE-2026-64560 adaptation for Xiaomi 15 dada OS4.0.0.8

amorcool/ios26.6-cve-2026-65343

CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)

windowsexploits/exploits

Curated archive of compiled and tested Windows exploits, providing ready-to-use binaries and scripts for security testing and research.

0xmarcio/pocindex

Search 82,000+ public CVE proof-of-concept exploits from GitHub, Nuclei, ExploitDB, Metasploit and Vulhub.

byt3l0rd/cve-2026-31431

Detector and proof-of-concept local privilege escalation for the Linux algif_aead page-cache scratch-write vulnerability (CVE-2026-31431). Includes…

msnightmare/prettyprague

GenDigital Avast Antivirus ZeroDay Elevation of Privileges Vulnerability

abraxas/fortigate-ssl-vpn-exploit-kit

The FortiGate SSL-VPN pot of gold. CVE-2024-21762 and CVE-2023-27997. 79 working exploit clients. 53 hardware SKUs. 55 FortiOS builds.

slapah/ghostlock-h8q

GhostLock CVE-2026-43499 port for Galaxy Z Fold 8 (h8q)

r3dw4n48m3d/cve-2021-3493-exploit

C-based local privilege escalation exploit for CVE-2021-3493, targeting OverlayFS in Linux kernels prior to 5.11. Provides compilation and usage…

msnightmare/hardbreacher

Kaspersky Antivirus For Endpoint ZeroDay Elevation of Privileges Vulnerability

smgorelik/windows-rce-exploits

The exploit samples database is a repository for **RCE** (remote code execution) exploits and Proof-of-Concepts for **WINDOWS**, the samples are…

jolovicdev/hayduk

Graphical attack management console for Metasploit: the lineage of Armitage as a single Go binary with a browser UI. Live network topology, campaign…

kongqbin/cve-2016-5195

Educational implementation of the Dirty COW (CVE-2016-5195) privilege escalation exploit, including race condition payload and SUID-based root shell…

xn0kkx/cve-2026-31431_copyfail_linuxkernel_lpe

Educational rewrite of the Copy Fail PoC (CVE-2026-31431) — Linux kernel LPE via algif_aead in-place crypto + splice() page-cache write

xd20111/cve-2026-31431

Documentation and analysis of a local privilege escalation vulnerability in the Linux kernel's authencesn template via AF_ALG and splice(), including…

malwarekid/cve-2026-31431

Proof-of-concept exploit for CVE-2026-31431, a Linux kernel AF_ALG memory corruption vulnerability. Uses splice to patch /usr/bin/su in page cache,…