GhostLock-H80GT
yakidango-official/ghostlock-h80gtHonor 80 GT (MagicOS 8.0.0.128, kernel 5.10.168) privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading
android-securitybinary-exploitationexploitation+2
1
yakidango-official/ghostlock-h80gtHonor 80 GT (MagicOS 8.0.0.128, kernel 5.10.168) privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading
wattocyber/custom-oscp-toolingOSCP-focused toolkit for read-only network, SMB, AD, DNS, web, and database enumeration; privesc scanning, hash identification, and…
omribaso/sccm-cve-2026-47301-remote-code-execution-exploitProof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path…
hmascs/ksurootOne-click Android kernel rooting tool exploiting CVE-2026-43499 to install KernelSU, with official, bundled, and custom .so payload sources.
joertx07/printnightmare-detection-labSplunk SIEM lab simulating and detecting CVE-2021-34527 (PrintNightmare) exploitation using Sysmon, Windows Event logs, and custom SPL detection…
hackspeak/cve-2026-60004Proof-of-concept exploit for Gitea diffpatch RCE, escalating repo-write access to arbitrary shell commands as the Gitea service account via crafted…
0xdak/cve-2025-32463_exploitLocal privilege escalation exploit for sudo 1.9.14-1.9.17 that abuses CVE-2025-32463 chroot handling, planting a malicious NSS library constructor to…
s3n4t0r-0x0/apts-adversary-simulationRealistic APT adversary simulation campaigns with custom C2 frameworks, backdoors, stagers, and bootloaders mirroring state-sponsored TTPs for red…
trevocastles/cve-2026-31431-copy-failExploit PoC for CVE-2026-31431 that uses AF_ALG and splice() to overwrite Linux page cache and patch /usr/bin/su in memory, escalating unprivileged…
thalpius/microsoft-cve-2021-1675Proof-of-concept C# exploit for CVE-2021-1675 (Windows Print Spooler elevation of privilege), accepting custom driver and DLL paths for targeted…
minhhk68/cve-2026-13152Proof-of-concept and advisory for an unauthenticated privilege escalation in a WooCommerce custom registration plugin, including root cause analysis,…
777erp/cve-2026-49176_bofCVE-2026-49176 WalletService LPE — standalone PoC + Cobalt Strike BOF (SYSTEM command on interactive session)
paradoxis/cve-2026-57239Proof-of-concept exploit for Foxit PDF Reader LPE vulnerabilities (CVE-2026-3775/3780/57239) that escalates privileges to NT AUTHORITY\SYSTEM via the…
mcipekci/wp2shellPre-auth RCE PoC for WordPress core — chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137 (author__not_in SQLi) into an…
administrator-01001/cve-2026-63030Proof-of-concept exploit for CVE-2026-63030 chaining REST API route confusion, SQL injection, oEmbed cache poisoning, and Customizer privilege…
tc4dy/cve-2026-41940-poc-exploit🚀 CVE-2026-41940 cPanel/WHM Auth Bypass Exploit - Best Flow 💥 CRLF injection leads to auth bypass, session hijacking & account leak. ✅ Proxy,…
motechstore/cve-2025-27591-pocProof-of-concept exploit for CVE-2025-27591, a local privilege escalation vulnerability in the Below Linux observability tool. Includes a shell…
davidcarliez/cve-2019-9702_symantec_encryption_desktop_lpe_pocLocal Privilege Escalation PoC to pop a SYSTEM shell for CVE-2019-9702 in Symantec Encryption Desktop.