Tools

bootsareme/copyfail-deconstructed

Educational deconstruction of CVE-2026-31431 privilege escalation exploit, providing readable Python and C implementations with custom shellcode…

minhhk68/cve-2026-13152

Proof-of-concept and advisory for an unauthenticated privilege escalation in a WooCommerce custom registration plugin, including root cause analysis,…

appl3b0y/edb-40564-mingw-fix

CVE-2011-1249 (MS11-046) AFD privilege escalation — MinGW cross-compilation fix + custom command support

izxci/cve-2026-8809

Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter

dmitri131313/cve-2025-21420-poc

Proof-of-concept demonstrating DLL sideloading via cleanmgr.exe for Windows privilege escalation, with a custom payload DLL and research into…

motechstore/cve-2025-27591-poc

Proof-of-concept exploit for CVE-2025-27591, a local privilege escalation vulnerability in the Below Linux observability tool. Includes a shell…

thomasgeens/cve-2021-1675

PowerShell exploit for CVE-2021-1675 (PrintNightmare) performing local privilege escalation via Print Spooler, with custom DLL payload injection to…

rabomen/dirty-pipe

C exploit for CVE-2022-0847 (Dirty Pipe) enabling privilege escalation via overwriting read-only files and SUID binaries with custom shellcode.

nxploited/cve-2025-5288

Wordpress REST API | Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - Missing Authorization to Unauthenticated…

killtr0/cve-2021-1675-printnightmare

PowerShell exploit for CVE-2021-1675 (PrintNightmare) performing local privilege escalation via Print Spooler, with custom DLL payload injection and…

oppressionbreedsresistance/cve-2021-1675-printnightmare

PowerShell proof-of-concept exploit for CVE-2021-1675 (PrintNightmare) with custom DLL payload and obfuscated loader for privilege escalation on…

helios973/cve-2026-31431_exp.c

C exploit for CVE-2026-31431 providing privilege escalation through a custom binary payload. Designed for testing and validation of the vulnerability.

realbatuhan/dirtypipetester

Shell script to detect and test systems for the Dirty Pipe (CVE-2022-0847) kernel vulnerability, supporting custom kernel version queries.

mawussid/cve-2026-41651-python

Python proof-of-concept exploit for CVE-2026-41651, a TOCTOU local privilege escalation in PackageKit allowing unprivileged users to install packages…

blueisbeautiful/cve-2018-19323

Modular kernel exploitation framework for CVE-2018-19323 (GIGABYTE GDrv) achieving privilege escalation to SYSTEM with multi-architecture support,…

mexeck88/csrf-via-stored-xss-for-privesc

Proof-of-concept exploit for CVE-2025-26153: stored XSS in Chamilo LMS forum threads enabling privilege escalation from regular user to admin via…

whoami-chmod777/cve-2021-1675-cve-2021-34527

PowerShell exploit for PrintNightmare (CVE-2021-1675) performing local privilege escalation via Print Spooler, with custom DLL payload injection to…