Tools

impost0r/rie

Kernel exploit for CVE-2026-43724 targeting Apple macOS/iOS systems. Provides proof-of-concept code for the disclosed vulnerability.

neo-neo6/cve-2025-65018-heap-buffer-overflow-in-libpng-ps4-ps5-

Proof-of-concept exploit for a heap buffer overflow in libpng on PS4/PS5. Generates a malicious PNG that triggers the vulnerability when opened in…

exploiteoom/cve-2026-31431

Exploit for CVE-2026-31431 that escalates privileges by altering user ID, with a verification script and mitigation instructions for the algif_aead…

thejoyofhacking/berdav-cve-2021-4034

Exploit for CVE-2021-4034 (PwnKit) that provides a root shell via polkit pkexec. Includes a dry-run mode to test vulnerability and a one-liner script…

nisec-eric/cve-2026-31431

Linux kernel local privilege escalation exploit for CVE-2026-31431, providing a reliable single-shot PoC with multiple language implementations,…

fangfang-yi/cve-2024-30088

C++ exploit for CVE-2024-30088, providing a proof-of-concept implementation for testing and analyzing this specific Windows kernel privilege…

izxci/cve-2026-49083

Python exploit for CVE-2026-49083 targeting privilege escalation in the LatePoint Calendar Booking WordPress plugin. Provides automated exploitation…

zhanghangorg/cve-2026-31431

Detector and proof-of-concept for a Linux kernel page-cache write vulnerability (CVE-2026-31431) in algif_aead, including a non-destructive scanner…

spoo1k/copy-fail-exploit-cve-2026-31431

Exploit for CVE-2026-31431, provided in Python and C, enabling privilege escalation via a copy-fail vulnerability.

isw-9/copy-fail-cve-2026-31431-aarch64

Python exploit for CVE-2026-31431 targeting aarch64, verified on Ubuntu 25.10. Executes the provided script to trigger the vulnerability.

sastraadiwiguna-purpleeliteteaming/cve-2025-13834-a-bluetooth-rfcomm-out-of-bounds-read-vulnerability-in-modern-wireless-devices

CVE-2025-13834 Technical Summary Vulnerability Type: Memory Disclosure / Out-of-Bounds (OOB) Read (CWE-125). CVSS Score: 7.5–8.1 (High/Critical). …

trex96/vulnerable-bsr-lab-cve-2023-6933

Hands-on lab for CVE-2023-6933, a PHP Object Injection vulnerability in Better Search Replace WordPress plugin, with Docker deployment, nuclei…

mafiosohack/offensive-security-lab-1

A hands-on vulnerability assessment and exploitation of a Windows 7 VM using the EternalBlue (CVE-2017-0143) exploit. Includes scanning, exploitation…

harshitvarma05/cve-2025-31324-exploits

Exploit code for CVE-2025-31324, providing proof-of-concept and automated exploitation for the identified vulnerability.

cwm1123/cve-2025-31129

Java-based exploit for CVE-2025-31129, providing proof-of-concept code to demonstrate and test the vulnerability in affected systems.

pengalaman-1t/cve-2021-4034

Exploit for CVE-2021-4034 (PwnKit) that provides a root shell via polkit pkexec vulnerability. Includes source code and build instructions.

killian0713/assignement_3-cve-2017-7269

Educational exploit reproduction of CVE-2017-7269, a buffer overflow in IIS 6.0 WebDAV, with setup guide, vulnerability analysis, and Metasploit…

m4xsec/cve-2026-31431-rce-exploit

Local privilege escalation exploit for CVE-2026-31431, a Linux kernel AF_ALG logic flaw allowing unprivileged users to write 4 bytes into page cache…