Tools

bikini/exploitarium

Curated archive of public proof-of-concept exploits and vulnerability research writeups covering web, binary, and network security, with a focus on…

depthfirstdisclosures/nginx-rift

NGINX RCE exploits

hackerhouse-opensource/exploits

exploits and proof-of-concept vulnerability demonstration files from the team at Hacker House

sslab-gatech/pwn2own2020

Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities

star-sg/cve

Collection of proof-of-concept exploit scripts for known CVEs targeting Linux kernels, Windows drivers, browsers, and web apps, for security research…

c0rel0ader/east

Exploits and Security Tools Framework 2.0.1

maxpl0it/cve-2020-0674-exploit

This is an exploit for CVE-2020-0674 that runs on the x64 version of IE 8, 9, 10, and 11 on Windows 7.

cryptogenic/ps4-6.20-webkit-code-execution-exploit

A WebKit exploit using CVE-2018-4441 to obtain RCE on PS4 6.20.

saelo/cve-2018-4233

Exploit for CVE-2018-4233, a WebKit JIT optimization bug used during Pwn2Own 2018

secmob/badkernel

Full exploit of CVE-2016-6754(BadKernel) and slide of SyScan360 2016

h4x0r-dz/cve-2024-21762

out-of-bounds write in Fortinet FortiOS CVE-2024-21762 vulnerability

forrest-orr/doublestar

A personalized/enhanced re-creation of the Darkhotel "Double Star" APT exploit chain with a focus on Windows 8.1 and mixed with some of my own…

theori-io/chakra-2016-11

Proof-of-Concept exploit for Edge bugs (CVE-2016-7200 & CVE-2016-7201)

forrest-orr/exploits

A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction…

0neb1n/cve-2020-16947

PoC of CVE-2020-16947 (Microsoft Outlook RCE vulnerablility)

hacksysteam/cve-2022-28672

Foxit PDF Reader Remote Code Execution Exploit

fsecurelabs/cve-2018-4121

macOS 10.13.3 (17D47) Safari Wasm Exploit

theori-io/cve-2016-0189

Proof-of-Concept exploit for CVE-2016-0189 (VBScript Memory Corruption in IE11)