Exploit for CVE-2026-109619

php2shell...

copy-fail-tiny-elf-CVE-2026-31431

Copy Fail Tiny ELF - CVE-2026-31431 Minimal 436-bytes exploit for Copy Fail, thanks to the power of golfing Magic This ELF ultra golfs the exploit by being totally unmapped, rwx, and by using itself conditionally as the ELF payload to use to poison the cache. More cursed ELF internals golfs comin...

CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN

CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN Exploitation tool to exploit the CVE-2024-24919 vulnerability in Checkpoint Firewall VPNs Installation: git clone https://github.com/r4p3c4/CVE-2024-24919-Exploit-PoC-Checkpoint-Firewall-VPN Requirements: pip install -r requirements.txt Help...

htbenum

htbenum A Linux enumeration script for Hack The Box This script is designed for use in situations where you do not have internet access on a Linux host and would like to run enumeration and exploit suggestion scripts, such as Hack The Box. I find myself running a similar set of scripts when I get...

CVE-2026-4747-

CVE-2026-4747: FreeBSD Remote Kernel RCE First remote kernel exploit both discovered and exploited by an AI 📋 Quick Summary Aspect| Detail ---|--- CVE| CVE-2026-4747 Vulnerability| Stack buffer overflow in kgssapi.ko RPCSECGSS Impact| Remote Kernel Code Execution → uid 0 reverse shell Affected|...

CVE-2025-55616

CVE-2025-55616 Author: Rana M.Sinan Adil Vulnerability Found in Zsh leading RCE through History Expression Key Points To Run this exploit: just change the ip address and the "p system" in exploit , because i also tried this in my second laptop, and to change it run this following command in gdb...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Roninwebsite is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby librariesronin-rb for a variety of security tasks, such as encoding/decoding data...

rogue-jndi

Rogue JNDI A malicious LDAP server for JNDI injection attacks. Description The project contains LDAP & HTTP servers for exploiting insecure-by-default Java JNDI API. In order to perform an attack, you can start these servers locally and then trigger a JNDI resolution on the vulnerable client, e.g...

CVE-2018-15982_EXP

CVE-2018-15982EXP Usage msfvenom -p windows/exec cmd=notepad.exe -f raw 86.bin msfvenom -p windows/x64/exec cmd=notepad.exe -f raw 64.bin python CVE201815982.py -i 86.bin -I 64.bin output exp.swf and index.html。 Demo https://twitter.com/Evi1cg/status/1071284773169950721...

ExploitVelotiSmart

ExploitVelotiSmart Allows exploiting the LFI vulnerability CVE-2018-14064 https://medium.com/@s1kr10s/velotismart-0day-ca5056bcdcac https://www.exploit-db.com/exploits/45030/...

cve-2025-48384-exploit

This repository does not have a README...

Exploit-Development

Exploit-Development Weaponized Exploit and Proof of Concepts PoC...

exphub

Notice In the end, I still felt that having separate scripts for each vulnerability was very inconvenient, so I integrated all poc and exp scripts into one, enabling one-click scanning + exploitation. Since I've been working on integration recently, Exphub has not been updated for a long time. Th...

CVE-2025-24893

CVE-2025-24893 Usage python CVE-2025-24893 http://target.com...

Exploit_Development

Proof-of-Concepts for my CVEs CVE-2022-3436 - Online Student Clearance System v1.0 - CVE-2022-3436.py...

Exploits

Exploits A selection of rebuilt and from scratch exploits. Some are existing ones remade for practice, others are self-discovered with CVEs...

vivo-root-build

PD2415 6.6.89 Full-Flow Candidate This source is based on the same-device/same-SoC PD2415 6.6.57 IonStack engine: perf KASLR, pselect GhostLock, CFI fops, pipe physrw. The dumpstate carrier closure is retained from the validated PD2241 method. The archived 6.6.89 target keeps...

shannon

!NOTE Cyber verification for Anthropic and OpenAI models: complete your provider's cyber verification program to prevent model failures and refusals during cyber workloads. Shannon is an autonomous, AI pentester for web applications and APIs. It analyzes your source code, identifies attack paths,...

ghostlock-myron-tw

GhostLock for POCO F8 Ultra / REDMI K90 Pro Max — Global & Taiwan Variant myron, WPMTWXM GhostLock CVE-2026-43499 kernel exploit port for the global/Taiwan firmware of the POCO F8 Ultra / REDMI K90 Pro Max codename myron, Snapdragon 8 Elite Gen 5 / SM8850. Target : HyperOS OS3.0.6.0.WPMTWXM —...

meltdown-exploit

MELTDOWN EXPLOIT POC Speculative optimizations execute code in a non-secure manner leaving data traces in microarchitecture such as cache. Lipp et. al 2018 published their code 2018-01-09 at https://github.com/IAIK/meltdown. Look at their paper for details: https://meltdownattack.com/meltdown.pdf...