Every new exploit,
on the radar.

Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431

QSEE Privilege Escalation Exploit using PRDiag* commands (CVE-2015-6639)

Cisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)

This is the Pwn2Own 2017 Safari backup vul's exploit.

FileReader Exploit

Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)

Docker container implementing tests for CVE-2016-2107 - LuckyNegative20

A WebKit exploit using CVE-2018-4441 to obtain RCE on PS4 6.20.

OS X 10.11.6 LPE PoC for CVE-2016-4655 / CVE-2016-4656

8.4.1 Jailbreak using CVE-2016-4655 / CVE-2016-4656

CVE-2019-1652 /CVE-2019-1653 Exploits For Dumping Cisco RV320 Configurations & Debugging Data AND Remote Root Exploit!

Spring messaging STOMP protocol RCE

CVE-2018-1270 表达式RCE环境

CVE-2018-8021 Proof-Of-Concept and Exploit

CVE-2018-4280: Mach port replacement vulnerability in launchd on iOS 11.2.6 leading to sandbox escape, privilege escalation, and codesigning bypass.

CVE-2018-4280: Mach port replacement vulnerability in launchd on macOS 10.13.5 leading to local privilege escalation and SIP bypass.

macOS 10.13.3 (17D47) Safari Wasm Exploit

PoC for Privilege Escalation in Windows 10 Diagnostics Hub Standard Collector Service

Arbitrary code execution with kernel privileges using CVE-2018-8897.

Implements the POP/MOV SS (CVE-2018-8897) vulnerability by leveraging SYSCALL to perform a local privilege escalation (LPE).

Implements the POP/MOV SS (CVE-2018-8897) vulnerability by bugchecking the machine (local DoS).

The exploitation for CVE-2018-8897

Multi-purpose proof-of-concept tool based on CPU-Z CVE-2017-15303

CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC

credit to artkond

Cisco Catalyst Remote Code Execution PoC

A POC for the Huge Dirty Cow vulnerability (CVE-2017-1000405)

Chrome < 62 uxss exploit (CVE-2017-5124)

Proof of Concept code for CVE-2016-5696

Proof-of-concept exploit code for CVE-2016-5696

A PoC demonstrating techniques exploiting CVE-2016-5696 Off-Path TCP Exploits: Global Rate Limit Considered Dangerous

Daemon to randomize tcp_challenge_ack_limit to prevent side channel attacks CVE-2016-5696

global rate-limiting in Linux (CVE-2016-5696) scanner

Proof-of-Concept exploit for Edge bugs (CVE-2016-7200 & CVE-2016-7201)

PoC code for 32 bit Android OS

CVE-2015-3636 exploit

Expolit for android (goldfish kernel v3.10.0+) on arm64 with PXN&SELinux Bypassed. Based on fi01's code.

CVE-2015-3636 exploit

root with CVE-2015-3636

Full exploit of CVE-2016-6754(BadKernel) and slide of SyScan360 2016

Public repository for improvements to the EXTRABACON exploit

Local root exploit for Nexus5 Android 4.4.4(KTU84P)

exploit for cve-2014-7911; android; java deserialization ;system privilege;ace;

CVE-2014-7911 vulnerability and CVE-2014-4322 vulnerability to get root privilege！

vulnerabilities‘ Poc and Exploit