Tools

0vercl0k/cve-2021-24086

Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.

epi052/cve-2018-15473

Multi-threaded, IPv6 aware, wordlists/single-user username enumeration via CVE-2018-15473

seclabresearchbv/cve-2022-34718-poc

Python-based proof-of-concept exploit for CVE-2022-34718, a remote code execution vulnerability in IPv6 on Windows, using Scapy to craft and send…

manizada/dirtyah6

Python PoC for CVE-2026-80844: IPv6 AH6 skb corruption and ESP-in-UDP decryption to overwrite /etc/pam.d/su and escalate to root on Linux.

komomon/cve-2020-16898--exp-poc

Proof-of-concept exploit and checker for CVE-2020-16898, a Windows TCP/IP remote code execution vulnerability. Includes Python-based exploit scripts…

patchpoint/cve-2024-38063

Proof-of-concept exploit for CVE-2024-38063, a Windows TCP/IP remote code execution vulnerability triggered by sending two crafted IPv6 packets with…

momika233/cve-2020-16898-exp

Exploit for CVE-2020-16898, a Windows TCP/IP stack remote code execution vulnerability in IPv6 source routing. Provides proof-of-concept code for…

zenzue/cve-2024-38063-poc

potential memory corruption vulnerabilities in IPv6 networks.

hibanitt/cve-2024-38063

In-depth technical analysis and proof-of-concept for CVE-2024-38063, a critical Windows IPv6 kernel RCE. Includes root-cause breakdown, Scapy-based…

komomon/cve-2020-16898-exp-poc

Proof-of-concept exploit for CVE-2020-16898, a Windows TCP/IP remote code execution vulnerability. Includes Python-based exploit scripts targeting…

m8seven/cve-2026-22874-gitea-ssrf-allowlist

CVE-2026-22874 writeup: incomplete SSRF allow-list in Gitea webhook/migration (IPv6 transition and cloud metadata). Fixed in Gitea 1.26.3.

suominen/ipv6_frag_escape

Tracking IPV6_FRAG_ESCAPE (CVE-2026-53362, CVE-2026-53366), the IPv6 fragmentation container escape

0xblackash/cve-2026-80844

Research repository for CVE-2026-80844 (DirtyAH6), a Linux kernel IPv6 AH6/XFRM local privilege escalation, with PoC, root-cause and patch analysis.

adminpentester/cve-2024-38063-

Remotely Exploiting The Kernel Via IPv6

lisinan988/cve-2021-24086-exp

Proof-of-concept exploit for CVE-2021-24086, a NULL dereference in tcpip.sys causing remote denial of service via malicious UDP packets over IPv6.

rat5ak/cve-2026-41285-openbsd-v6daemons-go-brrr

One IPv6 ND option with length zero. One missing check. Daemon walks backward and lives in the loop. Reported to OpenBSD, fixed, CVE assigned.

faizan-khanx/cve-2024-38063

CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6

salma-essaoud/cve-cvss--cve-2024-38063-ipv6-tcp-ip-remote-code-execution-analysis

Technical analysis and PoC demonstration of CVE-2024-38063, an IPv6 TCP/IP remote code execution vulnerability in Windows, including root cause, lab…