Tools

andrewtrube/cve-2021-1675

Local privilege escalation exploit for CVE-2021-1675 (PrintNightmare) that installs a malicious DLL to gain SYSTEM access on vulnerable Windows…

g0d150ne/wp2shell

Modular WordPress pre-auth exploit framework chaining SQL injection and authentication bypass to deliver remote code execution, interactive shells,…

mauricelambert/cve-2021-31166

CVE-2021-31166: exploitation with Powershell, Python, Ruby, NMAP and Metasploit.

tiagob0b/cve-2021-22005

Metasploit module for CVE-2021-22005 VMware vCenter arbitrary file upload vulnerability with proof-of-concept and remote code execution exploit.

maxprog-svg/cve-2026-68820_mass_exploit

Automated local privilege escalation exploit for Windows 10/11 targeting AFD.sys use-after-free to gain SYSTEM, with PPL bypass and EDR evasion for…

sneakynachos/cve-2026-4692-trust-me-im-in-rdm

Proof-of-concept exploit for Firefox BrowsingContext authorization bypass (CVE-2026-4692), demonstrating forged IPC messages to set InRDMPane and…

ccievoice2009/cve-2024-49112

Exploit for CVE-2024-49112, a critical Windows LDAP RCE vulnerability, triggering a crash via crafted Netlogon and LDAP interactions.

neseos-corp/cve-2026-50657

Exploit code for CVE-2026-50657 targeting Nese Vista through Nese 11 (BETA). Includes patch details and affected OS versions for security testing and…

danimrtzp/cve-2026-31431-revshell

Weaponized Python exploit for CVE-2026-31431, chaining Linux kernel privilege escalation to a daemonized root reverse shell with full PTY, patching…

spoo1k/copy-fail-exploit-cve-2026-31431

Exploit for CVE-2026-31431, provided in Python and C, enabling privilege escalation via a copy-fail vulnerability.

zeop-cybersec/word_mshtml

Contains the offensive (exploit and auxiliary) modules for the CVE-2021-40444.

jcatala/f_poc_cve-2021-4034

Proof-of-concept exploit for CVE-2021-4034, a local privilege escalation in polkit's pkexec, demonstrating exploitation via shared library injection.

adyanamul/remote-code-execution-rce-exploit-bluekeep-cve-2019-0708-poc

Proof-of-concept exploit for BlueKeep (CVE-2019-0708) enabling remote code execution on Windows via RDP, with implementations in Python, Java, C++,…

darrynb89/cve-2004-1561

Python port of a Metasploit exploit targeting CVE-2004-1561 for remote code execution. Designed for penetration testing and vulnerability validation…

puppetma4ster/metasploit-wordpress-canto-exploit-rce

this is a metasploit exploit module for CVE-2024-25096 and CVE-2023-3452

materaj2/cve-2025-68926-repo

Script and node.proto for exploit CVE-2025-68926

kimocoder/eternalblue

Python implementation of the EternalBlue exploit (CVE-2017-0144) targeting SMBv1 vulnerability for remote code execution on Windows systems.