Tools

tianstcht/cve-2023-4427

Exploit for CVE-2023-4427 targeting Chrome 117 V8, using many cross-origin iframes to brute-force ASLR and achieve code execution. Provides…

elit3pwner/cve-2015-1328-goldeneye

Automated local privilege escalation exploit for CVE-2015-1328 targeting Ubuntu overlayfs, designed for CTF environments with a simple bash…

freax13/cve-2023-46813-poc

Proof-of-concept exploit for CVE-2023-46813 targeting AMD SEV-SNP. Escalates privileges by manipulating hypervisor memory type changes to swap task…

zaydbf/cve-2025-9074-poc

Bash-based PoC exploit for CVE-2025-9074 targeting unauthenticated Docker Engine API to achieve container escape and remote code execution via…

itzexploit/cve-2017-8056

Python-based exploit for CVE-2017-8056 targeting XML-RPC denial-of-service vulnerability in web applications.

0x7556/cve-2026-24061

Cross-platform remote code execution exploit for GNU Inetutils telnet (versions 1.9.3 to 2.7), targeting CVE-2026-24061 with a simple command-line…

1ndevelopment/cve-2026-43499-s26

Exploits CVE-2026-43499 on Android GKI 6.12 devices: deterministic arbitrary kernel read/write, KASLR bypass, and full root via LD_PRELOAD payload.

boeseejykbtanke348/cve-2025-38001

Exploit for CVE-2025-41744 targeting Sprecher Automation SPRECON-E-C ICS devices, extracting default cryptographic keys to decrypt and tamper with…

jaky5155/cve-2019-0708-exp

Exploit for CVE-2019-0708 (BlueKeep) targeting Windows RDP vulnerabilities in XP and 7, enabling remote code execution for penetration testing.

wuxx/cve-2020-8004

Exploit tool for CVE-2020-8004 targeting STM32F1 microcontrollers, enabling firmware extraction via OpenOCD and Python scripts to bypass readout…

freax13/cve-2024-21980-poc

Exploit for CVE-2024-21980 targeting AMD SEV firmware to decrypt arbitrary memory of decommissioned SEV-SNP guests via a command buffer enforcement…

monkeysec-sys/kangaroo

Authentication bypass exploit for CVE-2026-32746 targeting legacy Telnet servers, with defensive guidance and Go-based implementation for authorized…

lindemer/cve-2019-11043

Python exploit for CVE-2019-11043 targeting PHP-FPM buffer underflow to achieve remote code execution via null byte overwrite and FastCGI variable…

junghyeonkum/cve-2022-24706

Proof-of-concept exploit for CVE-2022-24706 targeting Apache CouchDB 3.2.1 and below. Demonstrates remote command execution via Erlang Distribution…

oneoy/cve-2021-3493

C exploit for Ubuntu OverlayFS local privilege escalation (CVE-2021-3493) targeting unpatched kernels 5.11 and earlier across multiple Ubuntu…

zprototype/cve-2023-29808

Reflected cross-site scripting (XSS) proof-of-concept exploit for CVE-2023-29808 targeting the /index.php?map=overview&findme= endpoint in cmaps…

nnsee/inteno-exploits

A collection of exploits for various vulnerabilities targeting Inteno IOPSYS devices