sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

CVE-2017-5638

CVE-2017-5638 CVE-2017-5638 PoC Exploits...

cve-2021-4034

Already compiled CVE-2021-4034 exploits for x8664 systems If systems are patched or already updated, you will see help section of pkexec...

CVE-2025-31129

CVE-2025-31129 exploits for CVE-2025-31129...

Windows-Exploit-Suggester

DESCRIPTION This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. It requires the...

Learn-SecByte-CTF-Labs-Collection-Windows-Kernel-Exploits-Client-Side-Browser-Attacks

Learn-SecByte-CTF-Labs-Collection-Windows-Kernel-Exploits-Clie...

TCM-Security-Practical-Network-Penetration-Tester

Escalation Paths 1. Kernel Exploits 2. S...

kBxAc-CTF-2026

kBxAc CTF 2026 — Writeups Solutions, exploits, and writeups f...

exrop

Exrop Generador automático de cadenas ROP para binarios x86-64, impulsado por la ejecución simbólica de Triton. Características Establecer registros a constantes u otros registros rdi=0x41414141, rdi=rax Escribir en memoria direcciones/valores basados en constantes y registros Escribir...

Binary Exploits

Exploits binarios de Exploit Database Los exploits binarios se encuentran en el directorio /bin-sploits/. Este es un repositorio oficial de The Exploit Database, un proyecto patrocinado por Offensive Security. Nuestros repositorios son: Exploits y Shellcodes:...

heap-exploits-101

Heap Exploits 101 — From 0 to Hero A complete, self-contain...

lpe-toolkit

Kit de LPE Linux Kit d'escalade de privilèges multi-architecture avec 24 exploits amd64 pré-compilé ; autres architectures compilées via gcc à l'exécution. Prend en charge amd64, arm64, 386, mips, mipsle, mips64, et mips64le. Détecte la version du noyau, filtre les exploits corrigés, et essaie...

same_type_object_reuse_exploits

Exploit PoC di riutilizzo di oggetti stesso-tipo/stesso-indirizzo Exploit PoC sviluppati da Mathias Krause associati al blog su https://grsecurity.net/exploitinganddefendingagainstsametypeobjectreuse...

pocs

Proof of Concept Collection Consolidated repository of proof-...

Ironsquirrel

IRONSQUIRREL 本项目旨在以加密方式向受害者浏览器传递浏览器漏洞利用代码。采用椭圆曲线 Diffie-Hellman（secp256k1）进行密钥协商，并使用 AES 进行加密。 通过以加密方式向受害者传递漏洞利用代码（和 shellcode），攻击无法被重放。同时，HTML/JS 源代码经过加密，从而显著增加了逆向分析漏洞利用代码的难度。 如果您不明白我在说什么，请搜索“如何隐藏您的浏览器 0-day 漏洞”，并查看我的演讲。或者可以在 YouTube 上观看：https://www.youtube.com/watch?v=eyMDd98uljI 或者查看 SlideShar...

WordPress 7.1.0 < 7.1.1 / 7.0.0 < 7.0.5 / 6.9.0 < 6.9.8 / 6.8.0 < 6.8.9 / 6.7.0 < 6.7.8 / 6.6.0 < 6.6.8 / 6.5.0 < 6.5.11 / 6.4.0 < 6.4.11 / 6.3.0 < 6.3.11 / 6.2.0 < 6.2.12 / 6.1.0 < 6.1.13 / 6.0.0 < 6.0.15 / 5.9.0 < 5.9.17 / 5.8.0 < 5.8.16 / 5.7.0 < 5.7.18 / 5.6.0 < 5.6.20 / 5.5.0 < 5.5.21 / 5.4.0 < 5.4.22 / 5.3.0 < 5.3.24 / 5.2.0 < 5.2.27 / 5.1.0 < 5.1.25 / 5.0.0 < 5.0.28 / 4.9.0 < 4.9.32 / 4.8.0 < 4.8.31 / 4.7.0 < 4.7.36

WordPress versions 7.1.0 7.1.1 / 7.0.0 7.0.5 / 6.9.0 6.9.8 / 6.8.0 6.8.9 / 6.7.0 6.7.8 / 6.6.0 6.6.8 / 6.5.0 6.5.11 / 6.4.0 6.4.11 / 6.3.0 6.3.11 / 6.2.0 6.2.12 / 6.1.0 6.1.13 / 6.0.0 6.0.15 / 5.9.0 5.9.17 / 5.8.0 5.8.16 / 5.7.0 5.7.18 / 5.6.0 5.6.20 / 5.5.0 5.5.21 / 5.4.0 5.4.22 / 5.3.0 5.3.24 /...

Whetstone

Whetstone On-device JIT enabler for iOS 12 / 13, all devi...

Linux Distros Unpatched Vulnerability : CVE-2026-91838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in NetworkManager-sstp, the SSTP VPN plugin for NetworkManager. A local unprivileged user can exploit this vulnerability by embedding special...

Exploits + Shellcode + GHDB v2026-09-12

The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...

Astra Linux – Vulnerability in Thunderbird

The ms-msdt, search, and search-ms protocols deliver content to Microsoft applications, bypassing the browser, when a user accepts a prompt. These applications have known vulnerabilities that have been exploited in the wild although we know of none exploited through Thunderbird. Therefore, in thi...