Tools

rosnlr5/modrosnlr5

Proof-of-concept exploit for Linux kernel CVE-2026-31431, leveraging AF_ALG sockets to escalate privileges to root via payload injection and shell…

h1d3r/copy-fail_lpe_interactive

Exploit for CVE-2026-31431, a Linux kernel page cache corruption vulnerability, providing interactive root shell and non-interactive command…

devianntsec/cve-2025-55182

Master's thesis research on CVE-2025-55182 (React2Shell). Modular exploitation framework with 6 attack scenarios (RCE, exfiltration, defacement),…

nyambiblaise/domain-controller-dc-exploitation-with-metasploit-impacket

End-to-end Domain Controller exploitation using Metasploit and Impacket: discovered DC10, exploited Zerologon (CVE-2020-1472), extracted NTLM hashes,…

nanaao/dirtypipe-exploit

Dirty Pipe (CVE-2022-0847) PoC that hijacks a SUID binary to spawn. a root shell. (and attempts to restore the damaged binary as well)

huynambka/cve-2026-26114-poc

Proof-of-concept exploit for CVE-2026-26114, a remote code execution vulnerability in Microsoft SharePoint, with a Python PoC and Metasploit module…

mebeim/cve-2021-4034

Proof-of-concept exploit for CVE-2021-4034, a local privilege escalation in polkit's pkexec, demonstrating exploitation with simple C helpers and a…

nulltrace1336/samba-exploit-cve-2007-2447

Step-by-step guide to exploiting Samba 3.0.20 (CVE-2007-2447) using Metasploit, including Nmap scanning, payload setup, and reverse shell execution.

hklabcr/cve-2011-2523

Manual and automated exploitation walkthrough for vsftpd 2.3.4 backdoor (CVE-2011-2523) with custom reverse shell payload and Metasploit integration…

nhh9905/cve-2026-62735

Proof-of-concept for CVE-2026-62735, an integer overflow in http.sys leading to heap overflow and SYSTEM shell. Includes crash log and stack trace…

hosch3n/msmap

Modular memory webshell generator supporting Java containers (Tomcat, Spring, WebLogic) with multiple shell types, encoders, and automatic…

kongqbin/cve-2016-5195

Educational implementation of the Dirty COW (CVE-2016-5195) privilege escalation exploit, including race condition payload and SUID-based root shell…

hori0729/cve-2026-31431-verificador-exploit

Local privilege escalation exploit for Linux kernel CVE-2026-31431, exploiting AF_ALG and splice() to modify page cache and gain root shell.

hackspeak/cve-2026-62735

Local privilege escalation exploit for Windows HTTP.sys integer overflow (CVE-2026-62735), demonstrating crash and full SYSTEM shell via nonpaged…

0xshe/cve-2026-31431

Kernel privilege escalation exploit for CVE-2026-31431, abusing AF_ALG interface to overwrite /bin/su and spawn a root shell. Includes C…

xerxes-2/cve-2026-31431-rs

Rust-based proof-of-concept for CVE-2026-31431, exploiting AF_ALG and splice to overwrite /bin/su and spawn a root shell. Self-contained no_std…

juguitos/copy-fail

Python proof-of-concept for CVE-2026-31431, exploiting kernel AF_ALG to modify SUID binary page cache and spawn a root shell on Linux systems.