Every new exploit,
on the radar.

Android complete exploit chain that enables privilege escalation from a local untrusted app to root/kernel, combination of CVE-2026-49881 and CVE-2026-43284

CVE-2026-49881, using insecure context creation in Android 17's Telecom service to execute arbitrary code as UID 1000 system_server from an unprivileged app

a challenge for a CVE-2026-49881

CVE-2025-21479 proof-of-concept, I think

A proof-of-concept for CVE-2025-21479, chained with a Dirty Pagetable technique.

CVE-2025-21479 PoC for ZFlip5 with Knox in the way!(˶˃ ᵕ ˂˶)

This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapd…

Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell

Support OriginOS 4~ OriginOS 6(Some firmware requires manual, individual adaptation), using CVE-2025-21479，CVE-2026-43499

Temporary root (uid 0) on a bootloader-locked ASUS Zenfone 9 via CVE-2025-21479 + a perf-based physical-address leak. GPLv3.

**CVE-2026-18963** — unauthenticated Keycloak account takeover via the reset-credentials flow.

Exploit for KeyCloak CVE-2026-18963

CVE-2026-18963

Keycloak reset-credentials flow bypass

Hunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak database

This repo is poc of cve-2026-18963. Please use it on legal products (lab, local,...).

CVE-2026-18963 Keycloak Reset-Credentials State Bypass Detector

Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Of…

CVE-2017-0199

Quick and dirty fix to OLE2 executing code via .hta

Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malici…

RTF Cleaner, tries to extract URL from malicious RTF samples using CVE-2017-0199 & CVE-2017-8759

Exploit toolkit for vulnerability RCE Microsoft RTF

Exploit toolkit CVE-2017-0199 - v2.0 is a handy python script which provides a quick and effective way to exploit Microsoft RTF RCE. It could generate a malici…

Exploitation of CVE-2026-24061

基于cve-2026-24061 telnet远程认证绕过漏洞的批量检测利用工具

CVE-2026-24061 GNU Inetutils telnetd 身份验证绕过漏洞检测与利用 GUI 工具

A small docker lab to play with cve-2026-24061, the inetutils-telnetd authentication bypass.

scanner/exploiter CVE-2026-24061 & CVE-2026-32746

CVE-2024-4367 & CVE-2024-34342 Proof of Concept

CVE-2024-4367 arbitrary js execution in pdf js

PDF.js是由Mozilla维护的基于JavaScript的PDF查看器。此漏洞允许攻击者在打开恶意 PDF 文件后立即执行任意 JavaScript 代码。这会影响所有 Firefox 用户 （<126），因为 Firefox 使用 PDF.js 来显示 PDF 文件，但也严重影响了许多基于 Web 和 Elec…

YARA detection rule for CVE-2024-4367 arbitrary javascript execution in PDF.js

This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js (pdfjs-dist) library reported in CVE-2024-4367

PoC - Prueba de Concepto de CVE-2024-4367 en conjunto al CVE-2023-38831 en un solo Script

Analysis and PoC for CVE-2024-4367: arbitrary JavaScript execution (XSS) in PDF.js

This project is intended to serve as a proof of concept to demonstrate exploiting the vulnerability in the PDF.js (pdfjs-dist) library reported in CVE-2024-4367

Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215

Triggering and Analyzing Android Kernel Vulnerability CVE-2019-2215

This lab guides you through setting up an environment to explore CVE-2019-2215, a critical Android kernel vulnerability in the binder subsystem.

Android privilege escalation via an use-after-free in binder.c

Temproot for Bravia TV via CVE-2019-2215.

Android Kernel Vulnerability (CVE-2019-2215) temporary root PoC

PoC for old Binder vulnerability (based on P0 exploit)

( 0day ) Local Privilege Escalation in IObit Malware Fighter

CVE-2025-29927 Proof of Concept

NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927, a security flaw in Next.js

Proof-of-Concept for Authorization Bypass in Next.js Middleware

A Nuclei template to detect CVE-2025-29927 the Next.js authentication bypass vulnerability

Next.js PoC for CVE-2025-29927

Exploit for CVE-2025-29927 (Next.js) - Authorization Bypass

Authorization Bypass in Next.js Middleware

Test tool for CVE-2020-1472

PoC for Zerologon - all research credits go to Tom Tervoort of Secura

Exploit for zerologon cve-2020-1472

Exploit Code for CVE-2020-1472 aka Zerologon

Abuse CVE-2020-1472 (Zerologon) to take over a domain and then repair the local stored machine account password.

cve-2020-1472 复现利用及其exp

CVE-2020-1472 C++

Test script for CVE-2020-1472 for both RPC/TCP and RPC/SMB

CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android

Dirty Cow exploit - CVE-2016-5195

PoC for Dirty COW (CVE-2016-5195)

A CVE-2016-5195 exploit example.

CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-…

CVE-2016-5195 (Dirty COW) PoC for Android 6.0.1 Marshmallow

编译好的脏牛漏洞（CVE-2016-5195）EXP

Universal Android root tool based on CVE-2016-5195. Watch this space.

CVE-2022-0185

CVE-2022-0185 POC and Docker and Analysis write up

CVE-2022-0185 exploit rewritten with pipe primitive

CVE-2022-0185 exploit

Research and proof-of-concept for CVE-2022-0185 Linux kernel heap overflow vulnerability.

CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection

High fidelity scanner for CVE-2026-41940 (cPanel & WHM authentication bypass)

CVE-2026-41940 latest cPanel & WHM 0day - 70 million websites are possible to expose by Chirag Artani

CVE-2026-41940 SUPPORT SINGLE & MASS SCAN EXPLOIT

Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel/WHM unauthenticated session-forgery vulnerability disclos…

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

CVE-2024-21413 PoC for THM Lab

Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - Expect Script POC

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulnerability PoC

Microsoft Outlook Information Disclosure Vulnerability (leak password hash) - CVE-2024-21413 POC

Outlook exploitation

Bu betik, Microsoft Outlook'ta keşfedilen ve CVSS değeri 9.8 olan önemli bir güvenlik açığı olan CVE-2024-21413 için bir kavram kanıtı (PoC) sunmaktadır. Monik…

An exploit for Apache Struts CVE-2017-5638

Struts2 S2-045（CVE-2017-5638）Exp with GUI

Demo Application and Exploit

S2-045 漏洞 POC-TOOLS CVE-2017-5638

Struts2 S2-045（CVE-2017-5638）Vulnerability environment - http://www.mottoin.com/97954.html

Example PoC Code for CVE-2017-5638 | Apache Struts Exploit

st2-046-poc CVE-2017-5638

These are just some script which you can use to detect and exploit the Apache Struts Vulnerability (CVE-2017-5638)

🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)

Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)

CVE-2023-45866 - BluetoothDucky implementation (Using DuckyScript)

Exploits Tested in Mi A2 Lite and Realme 2 pro

BlueDucky exploits a Bluetooth vulnerability, specifically CVE-2023-45866, which allows an attacker to inject keystrokes into a target device. The attacker's d…

Rust implementation of Marc Newlin's keystroke injection proof of concept (CVE-2023-45866).

EDSEC_BKIF is a keystroke injection tool for Android, Linux, and iOS. With the help of CVE-2023-45866, it grants users unprecedented control over targeted syst…

My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)

Collection of "modchip" designs for launching payloads via the Tegra RCM bug (CVE-2018-6242)

Rust implementation of the Fusée Gelée exploit (CVE-2018-6242) for Tegra processors.

Payload injection tool for Nintendo Switch consoles vulnerable to CVE-2018-6242 ("Fusée Gelée")

An app that enables payload injection into a Switch console from an Android device by exploiting the CVE-2018-6242 vulnerability

Implementation of CVE-2018-6242 (AKA Fusée Gelée, AKA shofel2)

An implementation of the Fusee Gelee exploit (CVE-2018-6242) for the Nintendo Switch, along with a custom payload.

CVE 2021-21315 PoC

rust noob tried write easy exploit code with rust lang

systeminformation

Thesis scenario test (research only): Scenario D: KEV override path - [email protected] CVE-2021-21315

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

An ssh honeypot with the XZ backdoor. CVE-2024-3094

Quick and dirty PoC for checking whether a vulnerable version of xz-utils is installed (CVE-2024-3094)

GNU IFUNC is the real culprit behind CVE-2024-3094

Information for CVE-2024-3094

Shell scripts to identify and fix installations of xz-utils affected by the CVE-2024-3094 vulnerability. Versions 5.6.0 and 5.6.1 of xz-utils are known to be v…

XZ Backdoor Extract(Test on Ubuntu 23.10)

his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in Apache Tom…

Apache Tomcat 远程代码执行漏洞批量检测脚本(CVE-2025-24813)

Apache (CVE-2025-24813) GOExploiter Checker & Exploiter very Fast

Apache Tomcat - Remote Code Execution via Session Deserialization (CVE-2025-24813)

CVE-2025-24813利用工具

cve-2025-24813验证脚本

CVE-2025-24813 poc

A tool that identifies writable web directories in Apache Tomcat via HTTP PUT method [CVE-2025-24813]

An internet scanner for exploit CVE-2017-0144 (Eternal Blue) & CVE-2017-0145 (Eternal Romance)

This report outlines a structured VAPT engagement focusing on PCI DSS compliance, SMB service enumeration, and exploitation of CVE-2017-0144 (EternalBlue) on a…

AutoBlue - Automated EternalBlue (CVE-2017-0144 / MS17-010) exploitation tool leveraging Nmap and Metasploit for ethical hacking, penetration testing, and CTF …

Can you exploit the EternalBlue vulnerability (CVE-2017-0144) on a Windows 7 system and retrieve the hidden flag? Your goal is to gain administrative privilege…

CVE-2017-0144

CVE-2017-0144

This script checks for devices vulnerable to the EternalBlue exploit (CVE-2017-0144) in a network using SMB.

CVE-2023-38831 winrar exploit generator

一款用于生成winrar程序RCE（即cve-2023-38831）的POC的工具。

An easy to install and easy to run tool for generating exploit payloads for CVE-2023-38831, WinRAR RCE before versions 6.23

lazy way to create CVE-2023-38831 winrar file for testing

CVE-2023-38831 PoC (Proof Of Concept)

Understanding WinRAR Code Execution Vulnerability (CVE-2023-38831)

Pasos necesarios para obtener una reverse shell explotando la vulnerabilidad de winrar CVE-2023-38831 en versiones anteriores a 6.23.

This module exploits a vulnerability in WinRAR (CVE-2023-38831). When a user opens a crafted RAR file and its embedded document, a script is executed, leading …

Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.

Windows AppLocker Driver (appid.sys) LPE

Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.

Fork of https://github.com/hakaioffsec/CVE-2024-21338

PoC for the Untrusted Pointer Dereference in the appid.sys driver

kcfg bypass example - CVE-2024-21338

Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attack…

Fastjson 1.2.83 RCE 靶场环境 (CVE-2026-16723)

A critical vulnerability affecting Fastjson versions 1.2.68 – 1.2.83.

CVE-2026-16723

Fastjson RCE

This is N-day patch we releasing by testing our model capabilities

fastjson jsontype利用

CVE-2025-30208-EXP

全网首发 CVE-2025-31125 CVE-2025-30208 CVE-2025-32395 Vite Scanner

A PoC of the exploit script for the Arbitrary File Read vulnerability of Vite /@fs/ Path Traversal in the transformMiddleware (CVE-2025-30208).

CVE-2025-30208-EXP 任意文件读取

CVE‑2025‑30208 is a medium-severity arbitrary file read vulnerability in the Vite development server (a popular frontend build tool)

针对CVE-2025-30208和CVE-2025-31125的漏洞利用

CVE-2025-30208 - Vite Arbitrary File Read PoC