Tools

v-rzh/cve-2021-4034

Root exploit for CVE-2021-4034 (PwnKit) that abuses pkexec's out-of-bounds write to escalate privileges to root on Linux systems.

grospomg/cve-2025-5548-exploit-development

Practical lab focused on vulnerability analysis and exploit development, using FreeFloat FTP Server 1.0 as an educational buffer overflow case study…

dannic145/eternalblue-exploit-demonstration

Educational lab demonstrating EternalBlue (MS17-010) exploitation against Windows 7 using Metasploit, including post-exploitation, WannaCry…

hophouse/ivanti-pulse_vpn-client_exploit-cve-2023-35080_privilege-escalation

Exploit for CVE-2023-35080 leveraging a write primitive in the Ivanti/Pulse VPN client kernel driver on Windows to achieve privilege escalation.

trnguyen03/activemq-ids-ips-lab

IDS/IPS lab for detecting and preventing Apache ActiveMQ RCE (CVE-2023-46604) using GVM, Nmap, Snort, iptables, and UFW.

immersive-labs-sec/cve-2021-4034

Proof-of-concept exploit for CVE-2021-4034, a Polkit privilege escalation vulnerability, demonstrating local privilege escalation on vulnerable…

rek2/goenumerator

A personal tool in GO for my usual first enumeration steps on a target

hamlasiraj/metasploit-bailiwicked_domain-fix

Fix for undefined method each in Metasploit’s bailiwicked_domain.rb (CVE-2008-1447 DNS cache poisoning module)

ikow/cve-2026-31431-live-code-corruption

CVE-2026-31431 (Copy Fail) novel exploit: live code corruption via page cache. Overwrites libc exit() code through MAP_PRIVATE page sharing — affects…

sage954526/hfs_exploit_project

Metasploit RCE on HFS 2.3 - CVE-2014-62

zbs54/blackash-cve-2025-24071

CVE-2025-24071

bekhzod0725/perl-cve-2013-1775

CVE-2013-1775 Exploit written in Perl

mohamedkarrab/copy-fail-cve-2026-31431

Proof-of-concept exploit for Linux kernel CVE-2026-31431 (Copy Fail) that abuses AF_ALG to corrupt setuid-root binaries in page cache, achieving…

abdurahmon3236/-cve-2024-31211

Metasploit module that exploits a WordPress unserialization vulnerability (CVE-2024-31211) in WP_HTML_Token to achieve remote code execution.

rakhithjk/cve-2022-30333

Generates malicious RAR archives exploiting a path traversal vulnerability in unRAR to plant files at arbitrary locations, demonstrated with a Zimbra…

bhathiya404/exploiting-stagefright-vulnerability-cve-2015-3864

Exploit implementation for Android Stagefright vulnerability CVE-2015-3864, enabling remote code execution and privilege escalation on Android 5.1.1…

zeroethical/cve-2022-28108

Metasploit module exploiting CVE-2022-28108 in Selenium Grid for remote code execution, with content-type evasion and post-exploitation capabilities.

itmarcin2211/polkit-s-pkexec-cve-2021-4034

Proof-of-concept exploit for CVE-2021-4034 (PwnKit) demonstrating local privilege escalation in Polkit's pkexec, including patching instructions.