Tools

mzfr/liffy

Local file inclusion exploitation tool

lsposed/lspromise

Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and…

chompie1337/windows_lpe_afd_cve-2023-21768

Local privilege escalation exploit for CVE-2023-21768 targeting Windows AFD driver. Elevates arbitrary process to SYSTEM using I/O Ring read/write…

sailay1996/cdpsvclpe

Windows Local Privilege Escalation via CdpSvc service (Writeable SYSTEM path Dll Hijacking)

bluefrostsecurity/cve-2019-1215

Local privilege escalation exploit for CVE-2019-1215, a use-after-free in ws2ifsl.sys, targeting Windows 10 19H1 x64 with kASLR, kCFG, and SMEP…

chompie1337/windows_mskssrv_lpe_cve-2023-36802

Local privilege escalation exploit for CVE-2023-36802 targeting Windows kernel streaming service (MSKSSRV) on Windows 11 22H2, using I/O Ring…

synacktiv/dlhell

Local & remote Windows DLL Proxying

cbwang505/cve-2020-1066-exp

Local privilege escalation exploit for CVE-2020-1066 targeting Windows 7 and Server 2008 R2. Leverages arbitrary file replacement via Windows…

csenox/semanagevolumeexploit

Windows local privilege escalation exploit abusing SeManageVolumePrivilege to grant full C:\ drive access and gain a SYSTEM shell via PrintConfig.dll…

checkpointsw/vectoredoverloading

Local PE injection technique using hardware breakpoints and vectored exception handling to manipulate DLL loading and execute arbitrary payloads, as…

nbs32k/localstranger

PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.

rsmudge/cve-2020-0796-bof

Cobalt Strike Beacon Object File implementing CVE-2020-0796 SMBGhost local privilege escalation with dual weaponization paths for token theft and…

j4nn/cve-2020-0041

Local privilege escalation exploit for Android kernel vulnerability CVE-2020-0041, with portability across devices and kernel versions.

panyu6325/cve-2015-1805

Proof-of-concept exploit for CVE-2015-1805, a Linux kernel vulnerability enabling local privilege escalation via a race condition in the pipe buffer…

hexx0r/cve-2016-0051

Proof-of-concept exploit for CVE-2016-0051 (MS16-016) achieving local privilege escalation to SYSTEM on Windows 7, with compiled binaries and…

p0dalirius/cve-2022-45771-pwndoc-lfi-to-rce

Pwndoc local file inclusion to remote code execution of Node.js code on the server

iss4cf0ng/cve-2026-31431-linux-copy-fail

Rust-based local privilege escalation exploit for CVE-2026-31431, enabling execution of custom shellcode such as Meterpreter on Linux systems.