This lab involved working on the Kioptrix Level 1 vulnerable machine from VulnHub to practice basic penetration testing skills. I started by scanning and enumerating the target to find open ports a...

Windows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM exploit; for authorized testing - HackSpeak/CVE-2026-62735

This repository contains security assessment tooling, detection templates, and an automated exploit toolkit for identifying and exploiting **Unauthenticated Remote Code Execution (RCE)** in applica...

Visual, block-based Red Team exploit factory. Build multi-stage attack chains by dragging blocks. No boilerplate, no guesswork. - MrEx-Right/ViperForge

Windows kernel driver exploitation knowledge base — 28 case studies organized by driver type, grounded in real CVEs with build numbers and PoC references - splintersfury/KernelSight

Contribute to cbeacham0/FalconFlank-Exploit development by creating an account on GitHub.

Research lab and exploit chain for CVE-2026-75604: path traversal in the Next.js incremental cache, to RCE on Windows. - FORTBRIDGE-UK/cve-2026-75604

🧰 CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 9.9) | Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, pers...

A comics about the latest security incident where a swarm of openai AI agents infiltrate hugging face, how and why - MathFrenchToast/exploit-hf-openai-comics

Root My Galaxy exploit payloads — adds Samsung Galaxy S22+ (SM-S906B, S906BXXSNGZD7, kernel 5.10.237) support - Memetic0/Root-My-Galaxy-Payloads

🧰 CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 tools: Full Exploit (reverse shell, webshell, pers...

CVE-2024-36058 — Authenticated Time-Based Blind SQL Injection in Koha Library Software < 22.05.22 (opac-sendbasket.pl). Advisory + PoC by Hacklantic. - hacklantic/CVE-2024-36058

CVE-2024-36057 — Authenticated OS Command Injection in Koha Library Software < 22.05.22 (upload-cover-image.pl). Advisory + PoC by Hacklantic. - hacklantic/CVE-2024-36057

Scanners flag CVEs. PatchProof proves which ones actually reach your code — by running the real exploit against your actual code inside an isolated sandbox. Supports Python repos; generates and ver...

CVE-2026-63077 - Unauthenticated RCE exploit for JetBrains TeamCity via Agent Polling Deserialization. Supports mass scanning, multi-threading, and interactive shell. For authorized security testin...

Static security analyzer, least-privilege cloud trust policy engine, and zero-prerequisite offensive exploit chain synthesizer for GitHub Actions OIDC workflows. - gamesapeca/gha-oidc-auditor

Super elite end-to-end implant 0day. Full kill-chain. Exploit, escalate, pivot, poison, persistence. - abraxas/veneficus

Contribute to joaovicdev/EXPLOIT-CVE-2026-22778 development by creating an account on GitHub.

postgres CVE-2026-6471 Exploit. Contribute to goldendivider/cve-2026-6471-postgres-logical-decoding-dlopen development by creating an account on GitHub.

gpgsm CVE-2026-57062 exploit POC. Contribute to goldendivider/gpgsm-cve-2026-57062-cms-gcm-short-tag development by creating an account on GitHub.