Tools

kanpol/pocforcve-2015-1528

Proof-of-concept exploit for CVE-2015-1528 demonstrating privilege escalation on Android 5.0 via binder call fuzzing, with staged code injection into…

malwaretech/zombifyprocess

Inject code into a legitimate process

secmob/pocforcve-2015-1528

I'll submit the poc after blackhat

johnnygreeme/cve-2023-36003

Proof-of-concept exploit for CVE-2023-36003, a Windows Defender security feature bypass enabling privilege escalation and code execution evasion on…

ross-ns/wsus-cve-2025-59287

PowerShell exploit for CVE-2025-59287 targeting WSUS servers. Enables privilege escalation and remote code execution on unpatched Windows Update…

layer-6/cve-2026-5027-langflow

Multi-CVE exploit tool for pre-auth remote code execution on Ivanti Sentry and FortiSandbox. Features interactive shell, webshell deployment,…

bhathiya404/exploiting-stagefright-vulnerability-cve-2015-3864

Exploit implementation for Android Stagefright vulnerability CVE-2015-3864, enabling remote code execution and privilege escalation on Android 5.1.1…

dinosn/mariadb-13-rce-lab

MariaDB 13.0.1-rc RCE lab — priv-esc + heap UAF + JOP chain to system() as uid 999(mysql) on stock Docker image. Found with RAPTOR and…

risksense/zerologon

Exploit for zerologon cve-2020-1472

tracyliving606/regpwn

Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions

hatriot/token-priv

Token Privilege Research

lanleft/cve-2023-1829

Linux kernel local privilege escalation exploit for CVE-2023-1829, targeting Ubuntu 22.04 with netfilter filter functions. Includes build…

tiger3080/cve-2025-9267

Seagate Toolkit for Windows (Installer <2.35.0.6) is vulnerable to insecure DLL loading. The installer loads DLLs from the working directory without…

secnigma/cve-2021-3560-polkit-privilege-esclation

Automated Bash PoC for CVE-2021-3560 polkit privilege escalation. Exploits dbus timing attack to inject a sudo user and gain root shell on vulnerable…

smiletablabo/cve-2022-46395

Exploit for CVE-2022-46395, an Arm Mali kernel driver vulnerability, achieving arbitrary kernel code execution to disable SELinux and gain root on…

smiletablabo/cve-2022-20186

Exploit for CVE-2022-20186 in the Arm Mali kernel driver, achieving arbitrary kernel code execution to disable SELinux and gain root on Google Pixel…

0x05a/my-cve-2021-4034-poc

Proof-of-concept exploit for CVE-2021-4034, a local privilege escalation in polkit's pkexec, demonstrating exploitation on Ubuntu systems.