Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability

Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls.

Linux Kernel Rootkit for modern kernels (6x)

Proof of concept code for the Spectre CPU exploit.

Authenticate against a MySQL server without knowing the cleartext password

PoC exploit for arbitrary file read/write in locked Samsung Android device via MTP (SVE-2017-10086)

PoC materials for article https://habr.com/en/post/486856/

nmi stackwalking + module verification

MIRROR of the original 32-bit PoC for CVE-2024-6387 "regreSSHion" by 7etsuo/cve-2024-6387-poc

A personal collection of Windows CVE I have turned in to exploit source, as well as a collection of payloads I've written to be used in conjunction with these exploits.

Proof of Concept (PoC) CVE-2021-4034

PoC designed to evade userland-hooking anti-virus.

PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (Scanner and Exploit)

bypassing intel txt's tboot integrity checks via coreboot shim

A Log4j writeup and Docker based PoC written in PowerShell

Proof of Concept for EFSRPC Arbitrary File Upload (CVE-2021-43893)