Every new exploit,
on the radar.

PoC demonstrating the use of cve-2020-1034 for privilege escalation

CVE 2020-1034 exploit and presentation

vmware authentication bypass

IOC List

Atlassian Bitbucket Data Center RCE(CVE-2022-26133) verification.

CVE-2022-26133 Exploit

Exploit for WebSocket Vulnerability in Apache Tomcat

Recursive MMIO VM Escape PoC

CVE-2018-8174 - VBScript memory corruption exploit.

CVE-2018-8174_python

Analysis of VBS exploit CVE-2018-8174

Exploit Generator for CVE-2018-8174 & CVE-2019-0768 (RCE via VBScript Execution in IE11)

MS Word MS WordPad via IE VBS Engine RCE

Rig Exploit for CVE-2018-8174 As with its previous campaigns, Rig’s Seamless campaign uses malvertising. In this case, the malvertisements have a hidden ifram…

PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys.

CVE-2021-28476: Hyper-V vmswitch.sys arbitrary pointer dereference from guest VM

tools for automate configure Ubuntu 20.04 enviroment for testing CVE-2021-28476.

PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys.

PoC for CVE-2018-1002105.

Test utility for cve-2018-1002105

个人整理的Centos7.x + Kubernetes-1.12.3 + Dashboard-1.8.3 无 CVE-2018-1002105 漏洞的master节点全自动快速一键安装部署文件，适用于测试环境，生产环境的快速安装部署

PoC command injection example for cve-2018-1002105 based off https://github.com/gravitational/cve-2018-1002105

PoC code for CVE-2019-0841 Privilege Escalation vulnerability

A fully automatic CVE-2019-0841 bypass targeting all versions of Edge in Windows 10.

CVE-2022-25636

CVE-2022-25636 exploit rewritten with pipe primitive

CVE-2022-0185 analysis write up

CVE-2022-22639: Get a Root Shell on macOS Monterey

Key Negotiation Of Bluetooth (KNOB) attacks on Bluetooth BR/EDR and BLE [CVE-2019-9506]

CVE-2017-9506 - SSRF

CVE-2017-9506

Atlassian Jira XSS attack via Server Side Request Forgery (SSRF).

0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119

0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119

0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119

PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254)

Win32k LPE vulnerability used in APT attack

Unspecified vulnerability in Microsoft Windows before 8 allows local users to gain privileges via unknown vectors, as exploited in the wild in April 2015 (Ba…

Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)

windows 10 14393 LPE

Using CVE-2021-40449 to manual map kernel mode driver

Exploit for CVE-2021-40449

LPE exploit for a UAF in Windows (CVE-2021-40449).

Writeup and exploit for installed app to system privilege escalation on Android 12 Beta through CVE-2021-0928, a `writeToParcel`/`createFromParcel` serializati…

A login bypass(CVE-2019-18371) and a command injection vulnerability(CVE-2019-18370) in Xiaomi Router R3G up to version 2.28.23.

A login bypass(CVE-2019-18371) and a command injection vulnerability(CVE-2019-18370) in Xiaomi Router R3G up to versi…

Support ALL Windows Version

CVE-2020-0787的简单回显

win32k LPE

lpe poc for cve-2022-21882

CVE-2022-21882

Exploit for CVE-2021-30807

Gex is an iOS 14.7 jailbreak using CVE-2021-30807 IOMFB & CVE-2021-30860 exploit(s)

Exploit for the Post-Auth RCE vulnerability in Pulse Secure Connect

Cisco Anyconnect VPN unauth RCE (rwx stack)

Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)