AndroidKernelVulnerability

Android Kernel Vulnerability Overview In November 2017 a use-after-free bug to linux kernel was detected by syzkaller system. In February 2018 this was patched in some linux kernels and android versions. This fix was never included in Android monthly security bulletins, so it was not patched in...

CVE-2025-50165-x64-Exploit

CVE-2025-50165 Windows Graphics Component RCE x64 Critical Remote Code Execution via malicious JPEG – Windows 11 24H2 unpatched CVSS 9.8 – No privileges, no interaction required CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by Zscaler ThreatLabz Patched: November 202...

ClearSword

ClearSword Overview A DarkSword Kernel exploit C port I tried to keep it as close to the original as possible, but had to do a few changes to make it work in earlier iOS versions. These changes and personal modifications will be denoted by NOTE comments. I've added line comments to basically ever...

jsunpack-n

jsunpack-n jsunpack-n emulates browser functionality when visiting a URL. It's purpose is to detect exploits that target browser and browser plug-in vulnerabilities. It accepts many different types of input: PDF files - samples/sample-pdf.file Packet Captures - samples/sample-http-exploit.pcap HT...

Exploit-FortinetMagicBackdoor

This repository does not have a README...

CVE-2018-17463

CVE-2018-17463 Completed a working exploit for CVE-2018-17463 for fun. The original writeup that I found on this bug was here http://phrack.org/papers/jitexploitation.html. I just really wanted to change this arb r/w into a fully working exploit. Also I learned the JIT spray technique from the...

cve-2017-1635-PoC

cve-2017-1635-PoC poc based on: https://github.com/emcalv/tivoli-poc...

heartbleed-poc

HeartBleed Tester & Exploit NB Nearly all the tools nmap, metasploit, nessus, even burp have the most up to date versions of their scanners. These tools were released at the early stages when tools were still being developed. Rather use those than these now. Tool Guide If you want to mass scan, t...

CVE-2023-21768

Exploit with IO Rings for CVE-2023-21768 Tested on Windows 22H2 22621.963...

CVE-2020-11546

Preface A GO language version of the CVE-2020-11546 exploitation tool, just for practicing GO language. Usage go get -u -v github.com/damit5/CVE-2020-11546@master CVE-2020-11546 Build Yourself git clone https://github.com/damit5/CVE-2020-11546 bash build.sh...

CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

exploit_CVE-2021-3560

CVE-2021-3560 Exploit Script This script exploits CVE-2021-3560, a vulnerability in polkit that allows privilege escalation to root. Usage After cloning the repository, grant execution permissions and run the script: chmod +x exploit.sh ./exploit.sh Expected Outcome After running the script, a ne...

nmap-vulners

nmap-vulners Turn an nmap service scan into a ranked list of CVEs, exploits and what is being attacked in the wild. One NSE script that takes the software nmap already identified, asks the Vulners database what is known about it, and prints the answer inside the scan report - worst first, by what...

doona

Doona - Network fuzzing tool .:: About ::. Doona is a fork of the Bruteforce Exploit Detector Tool BED. BED is a program which is designed to check daemons for potential buffer overflows, format string bugs etc. Doona is Australian for duvet. It adds a significant enough number of features/change...

cve-2023-29360

PoC for CVE-2023-29360 Exploit targeting MSKSSRV.SYS driver Note If you have any cool tricks & tips that will make this exploit better I'm open to any suggestions : Credits Thomas Imbert @masthoon from Synacktiv @Synacktiv...

Exim-CVE-2018-6789

Exim CVE-2018-6789 PoC materials to exploit CVE-2018-6789. Blogpost explaining the PoC is available on Synacktiv Blog. This PoC connects to a vulnerable Exim server and exploits CVE-2018-6789. Usage usage: exploit -hv options: -h, --help Print this help -v, --verbose Enable verbose output...

wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

PaloAltoRceDetectionAndExploit

PaloAlto Rce Detection And Exploit Detecion for the vulnerability CVE-2017-15944 Till now no vulnerability scanner detecting the vulnerability Detection and exploit...

CVE-2022-30525

CVE-2022-30525 CVE-2022-30525 POC exploit Usage usage: exploit.py -h -t TARGET -lhost LOCALHOST -lport LOCALPORT optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET IP address of the target, eg: https://127.0.0.1:9443 -lhost LOCALHOST, --localhost LOCALHOST I...

CVE-2022-1388

CVE-2022-1388 CVE-2022-1388 POC exploit Usage usage: exploit.py -h -t TARGET -l LIST -c COMMAND optional arguments: -h, --help show this help message and exit -t TARGET, --target TARGET The IP address of the target, eg: 127.0.0.1:9443 -l LIST, --list LIST List of target url saperated with new lin...