macOS-Kernel-Exploit

macOS-Kernel-Exploit DISCLAIMER You need to know the KASLR slide to use the exploit. Also SMAP needs to be disabled which means that it's not exploitable on Macs after 2015. These limitations make the exploit pretty much unusable for in-the-wild exploitation but still helpful for security...

poc-cve-next

PoC for Next.js Vulnerability. Credits where credits are due. This was written in go but I got inspiration from: github.com/namest504/CVE-2025-66478 For more info visit that repo. Cheers! Disclaimer This code is provided for security research and educational purposes only. Using this tool against...

badspin

Bad Spin: Android Binder LPE Author: Moshe Kol Privilege escalation exploit from unstrustedapp for Android Binder vulnerability CVE-2022-20421. The vulnerability is patched on Android's Security Bulletin of October 2022. The exploit works on devices running kernel versions 5.4.x and 5.10.x, and i...

Exploits

Exploits Exploits developed by Outflank B.V. team members...

CVE-2026-9082

⚠️ Avertissement de recherche en sécurité et mentions légales 📌 Objectif de ce dépôt Ce dépôt est fourni strictement à des fins éducatives, académiques et de recherche en cybersécurité autorisées uniquement. Il est destiné à soutenir la compréhension de : Les vulnérabilités de sécurité et les...

CVE-2026-44338

⚠️ Исследования в области безопасности и юридический отказ от ответственности 📌 Назначение этого репозитория Этот репозиторий предоставлен строго в образовательных, академических и авторизованных исследовательских целях в области кибербезопасности. Он предназначен для поддержки понимания: Концепци...

CVE-2025-41242

⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in controlled...

CVE-2026-6857

⚠️ Исследования в области безопасности и юридическое предупреждение 📌 Назначение данного репозитория Данный репозиторий предоставляется исключительно в образовательных, академических и санкционированных целях исследований в области кибербезопасности. Он предназначен для понимания: Уязвимостей...

CVE-2026-20223

CVE-2026-20223 ⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in...

CVE-2026-0001

⚠️ Исследования в области безопасности и юридическое предупреждение 📌 Цель этого репозитория Этот репозиторий предоставляется строго только для образовательных, академических и авторизованных целей исследования кибербезопасности. Он предназначен для поддержки понимания: Концепции уязвимостей и...

CVE-2026-44963

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: root@kitploit: git clone cd Project use python follow below Create a virtual environment...

CVE-2026-8037

cve-id ⚡ Простое использование Используйте этот проект только в безопасных и авторизованных средах, таких как: Локальные виртуальные машины Docker-контейнеры Изолированные лабораторные стенды Авторизованные среды тестирования на проникновение Пример настройки: root@kitploit: git clone cd Project...

CVE-2026-48907

CVE-2026-48907 - Proof of Concept PoC ⚠️ Disclaimer This repository is created for educational and security research purposes only. The author does not condone or support any unauthorized or malicious use of this code. Use it only in environments where you have explicit permission to test security...

webapp-exploits

webapp-exploits Web Application Exploit Development...

vulnerability-research

Vulnerability Research My corpus of publicly disclosed vulnerabilities and other findings...

akamai-security-research

Akamai Security Research This repository includes code and IoCs that are the product of research done in Akamai's various security research teams. You can read about our research in Akamai's Security blog. Copyright 2024 Akamai Technologies Inc. Licensed under the Apache License, Version 2.0 the...

CVE-2025-29927

Next.js Middleware Bypass Checker | CVE-2025-29927 Herramienta automatizada en Bash para detectar aplicaciones Next.js vulnerables al bypass de middleware CVE-2025-29927 , según la investigación de Zhero Web Security. Requisitos bash whatweb curl Instálalos en Debian/Ubuntu con: root@kitploit: su...

Clutch

Clutch Clutch is a high-speed iOS decryption tool. Clutch supports the iPhone, iPod Touch, and iPad as well as all iOS version, architecture types, and most binaries. Clutch is meant only for educational purposes and security research. Clutch requires a jailbroken iOS device with version 8.0 or...

NextJS-CVE-2025-29927-Docker-Lab

root@kitploit: 🚨 NextJS-CVE-2025-29927-Docker-Lab This repository contains a Docker-based lab environment to explore and demonstrate the Next.js CVE-2025-29927 vulnerability in a controlled setting. ⚠️ DISCLAIMER: This lab is for educational and security research purposes only. Do not expose it to...

security-research

Security Research Vulnerabilities I have reported to the Apache Software Foundation, disclosed through the ASF security process. 46 CVEs across 15 projects , 2023 to 2026. Where a public reproducer exists it is linked. Each one is a minimal, self-contained project that demonstrates the issue and...