Every new exploit,
on the radar.

OpenSSH 9.1 vulnerability mass scan and exploit

OpenSSH Pre-Auth Double Free CVE-2023-25136 POC

OpenSSH 9.1 vulnerability mass scan and exploit

OpenSSH 9.1漏洞大规模扫描和利用

CVE-2023-25136 POC written by axylisdead

OpenSSH Pre-Auth Double Free CVE-2023-25136 – Writeup and Proof-of-Concept

Linux 4.10 < 5.1.17 PTRACE_TRACEME local root

The exploit for CVE-2019-13272

linux 提权

Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287/Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538

This is a Python 3 version of this exploit. Hope it works!!!

Es una vulnerabilidad para escalar privilegios en linux.

提权漏洞

Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287

CVE-2025-50168 Exploit PoC — Pwn2Own Berlin 2025 - LPE(Windows 11) winning bug.

Artefacts for blog post on finding CVE-2025-37899 with o3

Artefacts for blog post on finding CVE-2025-37899 with o3

This is a tool published for the Citrix ADC (NetScaler) vulnerability. We are only disclosing this due to others publishing the exploit code first.

Remote Code Execution Exploit for Citrix Application Delivery Controller and Citrix Gateway [ CVE-2019-19781 ]

CVE-2019-19781 - Remote Code Execution on Citrix ADC Netscaler exploit

Detect and log CVE-2019-19781 scan and exploitation attempts.

Test a host for susceptibility to CVE-2019-19781

Indicator of Compromise Scanner for CVE-2019-19781

Citrix ADC Remote Code Execution

Indicator of Compromise Scanner for CVE-2019-19781

own implementation of the CVE-2017-1000367 sudo privilege escalation vulnerability in python

CVE-2017-1000367

ColorOS短信漏洞，以及用户自救方案

OxygenOS Telephony provider permission bypass

Exploit for CVE-2023-29360 targeting MSKSSRV.SYS driver

POC for CVE-2023-29360

Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation

Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite "Lazy Bundle" mitigation

Writeup and exploit for CVE-2025-22441: Privilege escalation from installed app to SystemUI process on Android due to pass of untrusted ApplicationInfo to Load…

FairPlay decryptor (dump iPA) for iOS Application that running on macOS with SIP-enabled, using CVE-2025-24204. Support macOS 15.0-15.2

PoC and technical details of CVE-2025-24204

This is POC for IOS 0click CVE-2025-43300

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption

This is POC for IOS 0click CVE-2025-43300

CVE-2019-3396 confluence SSTI RCE

Confluence 未授权 RCE (CVE-2019-3396) 漏洞

Confluence Widget Connector RCE

Confluence Widget Connector path traversal (CVE-2019-3396)

Confluence unauthorize template injection

CVE-2019-3396 Memshell for Behinder

Confluence Widget Connector RCE

One day based on https://googleprojectzero.blogspot.com/2022/10/rc4-is-still-considered-harmful.html

poc of CVE-2022-33679

poc of CVE-2022-33679

Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)

Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)

An exploit for Apache Struts CVE-2018-11776

Working Python test and PoC for CVE-2018-11776, includes Docker lab

This tool takes advantage of CVE-2018-11776 and Shodan to perform mass exploitation of verified and vulnerable Apache Struts servers.

Proof of Concept for CVE-2018-11776

Critical Remote Code Execution Vulnerability (CVE-2018-11776) Found in Apache Struts.

A simple exploit for Apache Struts RCE S2-057 (CVE-2018-11776)

Creating a vulnerable environment and the PoC

Vulnerable docker container for CVE-2018-11776

This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.

7-Zip Mark-of-the-Web绕过漏洞PoC(CVE-2025-0411)

CVE-2025-0411 7-Zip Mark-of-the-Web Bypass

Rust Macros No Recoil Guide 🚀 Boost Aim Like a Pro in C and Python

PoC for Nginx 0.6.18 - 1.20.0 Memory Overwrite Vulnerability CVE-2021-23017

nginx 1.15.10 patch against cve-2021-23017 (ingress version)

The issue only affects nginx if the "resolver" directive is used in the configuration file. Further, the attack is only possible if an attacker is able to forg…

vulnerability in NGINX servers (versions 0.6.18–1.20.0). The scripts aim to cause a Denial of Service (DoS) by sending malicious DNS responses, with enhancemen…

NGINX Security Hardening & Vulnerability Remediation Analysis of critical CVEs (CVE-2021-23017, HTTP/2 DoS flaws) in outdated NGINX versions, with actionable …

Sample exploit of patched vulnerability

Let's control Secure Boot Chain ourselves.

CVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC

Proof of concept script to check if the site is vulnerable to CVE-2023-35078

Tools to scanner & exploit cve-2023-35078

Nmap script to exploit CVE-2023-35078 - Mobile Iron Core

CVE-2023-35078 - Ivanti MobileIron Core Remote Unauthenticated API Access Exploit tool

Easy and non-intrusive script to check for CVE-2023-35078

Ivanti Endpoint Manager Mobile (EPMM) POC

Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit

CVE-2023-33246 RocketMQ RCE Detect By Version and Exploit

Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit

A go-exploit for fetching the RocketMQ broker configuration in order to discover indicators of compromise for CVE-2023-33246

CVE-2023-33246：Apache RocketMQ 远程命令执行漏洞检测工具

CVE-2023-33246 - Apache RocketMQ config RCE

Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)

Unrestricted File Upload by Weak Encryption affected versions (CVE-2017-11317) 2. Remote Code Execution by Insecure Deserialization - (CVE-2019-18935)

针对JWT渗透开发的漏洞验证/密钥爆破工具，针对CVE-2015-9235/空白密钥/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ，也可使用字典/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)