poc-step-finance-2026

Step Finance Stake Authority Compromise — PoC Educational...

The research never stops: Zhiniang Peng’s security research story

Some security researchers discover hacking early. Others discover it accidentally. For Zhiniang Peng, it started with curiosity and cybersecurity magazines...

filecoin-audit-kit

Filecoin Security Devnet Spin up a local Filecoin network for...

Researchers Demonstrate 27 Attacks Against Major Password Managers

Researchers demonstrate multiple attacks against major password managers, showing how compromised servers and design flaws can expose encrypted vault data...

📄 SmarterMail 100.0.9413 GUID File Remote Code Execution

This PHP code implements a fully automated remote exploitation framework targeting SmarterMail version 100.0.9413. It is designed to identify the service, determine the underlying operating system, abuse a file upload mechanism with path traversal, and achieve arbitrary file write leading to remo...

OpenSSL 3.x Realistic ASN.1 / PKCS#12 Denial of Service Tool

This proof of concept builds structurally correct ASN.1 DER / PKCS12 files designed to stress-test OpenSSL's parser and memory handling. It focuses on non-exploitative impacts such as denial of service, excessive memory consumption, deep recursion, malformed lengths, and duplicated/overlapping...

Exploit for CVE-2025-4517

CVE-2025-4517-poc Here is the updated script as a Proof-of-Co...

modelscan-bypass-poc

⚠️ ModelScan Bypass PoC — Security Research WARNING: This...

modelscan-bypass-poc

⚠️ ModelScan Bypass PoC — Security Research WARNING: This...

CVE-Free-CRM-Advisories

CVE-Free-CRM-Advisories This repository contains Proof of Con...

CVEs

CV...

Exploit for CVE-2026-0828

💀 0xKern3lCrush-M4te-CVE-2026-0828 Windows BYOVD Research &...

Exploit for Out-of-bounds Write in Netapp C400_Firmware

🔐 SLUBSTICK Exploitation Research Demonstrating Race Con...

Unicornscan 0.4.51

Unicornscan is an information gathering and correlation engine built for and by members of the security research and testing communities. It was designed to provide an engine that is Scalable, Accurate, Flexible, and Efficient. It is released for the community to use under the terms of the GPL...

Exploit for CVE-2025-36911

WhisperPair Python CLI Fast Pair CVE-2025-36911 Exploit To...

Exploit for CVE-2025-36911

ZWhisper for Linux CVE-2025-36911 WhisperPair Vulnerabilit...

Exploit for CVE-2025-36911

zWhisper CVE-2025-36911 WhisperPair Vulnerability Scanner...

macOS Mavericks 10.9 Local Privilege Escalation Tooling

This is not an exploit but rather a theoretical ROP chain construction framework for macOS Mavericks 10.9 that is inspired by older research...

Bypassing Windows Administrator Protection

Posted by James Forshaw A headline feature introduced in the latest release of Windows 11, 25H2 is Administrator Protection. The goal of this feature is to replace User Account Control UAC with a more robust and importantly, securable system to allow a local user to access administrator privilege...

Exploit for CVE-2025-36911

WhisperPair-PoC-Tool and Research A deep dive into CVE-2025-3...