Tools

wh04m1001/cve-2024-20656

Proof-of-concept for local privilege escalation in VSStandardCollectorService150, demonstrating exploitation of CVE-2024-20656 on Windows.

y3a/cve-2023-28229

Proof-of-concept exploit for Windows CNG KeyIso RPC elevation of privilege and sandbox escape, demonstrating exploitation of CVE-2023-28229.

rvn0xsy/cve-2021-4034

Exploit for CVE-2021-4034 (pkexec) that adds a root user with sudo privileges. Includes manual exploitation steps and compiles pwnkit.so for local…

kiks7/cve-2022-2602-kernel-exploit

C exploit for CVE-2022-2602, a use-after-free in the Linux kernel's io_uring subsystem, enabling local privilege escalation through file descriptor…

grines/scour

Module-based AWS exploitation framework for red team testing and blue team analysis. Emulates attack patterns in the AWS control plane with unique UA…

nikaiw/cve-2021-4034

Proof-of-concept exploit for CVE-2021-4034, a local privilege escalation vulnerability in polkit's pkexec, demonstrating exploitation for security…

safebreach-labs/eventlogin-cve-2025-29969

Exploitation of CVE-2025-29969

uziii2208/cve-2025-33073

Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled.

rogue-kdc/cve-2019-1253

Proof-of-concept exploit for CVE-2019-1253, a Windows privilege escalation vulnerability. Demonstrates exploitation technique for security research…

xalgord/react2shell

Advanced Exploitation Toolkit for Next.js Server Actions (CVE-2025-55182)

sxlmnwb/cve-2023-0386

Vulnerabilities Exploitation On Ubuntu 22.04

mebeim/cve-2021-4034

Proof-of-concept exploit for CVE-2021-4034, a local privilege escalation in polkit's pkexec, demonstrating exploitation with simple C helpers and a…

incredibleindishell/certi-bhai

AD CS exploitation related stuff goes here

lexfo/cve-2017-11176

Proof-of-concept exploit for CVE-2017-11176, a local privilege escalation vulnerability in the Linux kernel. Demonstrates exploitation of a…

freeide2017/cve-2021-33739-poc

Proof-of-concept exploit for CVE-2021-33739 and CVE-2021-26868, demonstrating local privilege escalation on Windows systems through binary…

randorisec/cve-2022-1972-infoleak-poc

Proof-of-concept exploit for CVE-2022-1972, a kernel information leak in the Netfilter subsystem. Demonstrates unprivileged user namespace…

p3nt3st3r-star/cve-2026-8732-poc

Multi-threaded mass scanner for CVE-2026-8732 in WordPress WP Google Map Pro. Automates nonce extraction, token exploitation, and hidden admin…