370 repositorios
Awesome GitHub RepositoriesVulnerability Proofs
Demonstrations and exploit scripts for publicly disclosed software vulnerabilities.
Explore 370 awesome GitHub repositories matching part of an awesome list · Vulnerability Proofs. Refine with filters or upvote what's useful.
Awesome Vulnerability Proofs GitHub Repositories
Encuentra los mejores repositorios con IA.Buscaremos los repositorios que mejor coincidan usando IA.
- theori-io/copy-fail-cve-2026-31431
theori-io/copy-fail-CVE-2026-31431
3,958Ver en GitHubEste proyecto es una implementación de prueba de concepto para CVE-2026-31431, que sirve como herramienta de escalada de privilegios local para el kernel de Linux. Funciona como un exploit que permite a una cuenta de usuario estándar obtener permisos de root. La herramienta demuestra un ataque de caché de página del kernel, donde el acceso root se logra escribiendo shellcode en las páginas cacheadas de un binario privilegiado. Este proceso manipula cómo el kernel de Linux maneja las cachés de página para ejecutar código con permisos elevados. El repositorio cubre áreas de investigación de seguridad en Linux, incluyendo análisis de corrupción de memoria del kernel y pruebas de escalada de privilegios local para verificar la susceptibilidad del sistema a esta vulnerabilidad específica.
PoC for Copy Fail LPE.
Python - welk1n/jndi-injection-exploit
welk1n/JNDI-Injection-Exploit
2,814Ver en GitHubJNDI注入测试工具（A tool which generates JNDI links can start several servers to exploit JNDI Injection vulnerability,like Jackson,Fastjson,etc）
PoC for Log4Shell JNDI injection.
Java - notselwyn/cve-2024-1086
Notselwyn/CVE-2024-1086
2,449Ver en GitHubUniversal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.
PoC for Netfilter LPE.
Ccvecve-2024-1086exploit - topotam/petitpotam
topotam/PetitPotam
2,241Ver en GitHubPoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.
PoC for PetitPotam NTLM relay.
C - kozmer/log4j-shell-poc
kozmer/log4j-shell-poc
1,849Ver en GitHubA Proof-Of-Concept for the CVE-2021-44228 vulnerability.
PoC for Log4Shell RCE.
Pythoncve-2021-44228javalog4j - cube0x0/nopac
cube0x0/noPac
1,403Ver en GitHubCVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.
PoC for noPac LPE.
C# - ly4k/pwnkit
ly4k/PwnKit
1,312Ver en GitHubSelf-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation
PoC for PwnKit LPE.
Ccve-2021-4034 - dirkjanm/cve-2020-1472
dirkjanm/CVE-2020-1472
1,306Ver en GitHubPoC for Zerologon - all research credits go to Tom Tervoort of Secura
PoC for ZeroLogon.
Python - arthepsy/cve-2021-4034
arthepsy/CVE-2021-4034
1,156Ver en GitHubPoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)
PoC for PwnKit LPE.
Ccvecve-2021-4034poc - calebstewart/cve-2021-1675
calebstewart/CVE-2021-1675
1,100Ver en GitHubPure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)
PowerShell PoC for PrintNightmare.
PowerShell - blasty/cve-2021-3156
blasty/CVE-2021-3156
1,014Ver en GitHubThis is an exploit for the CVE-2021-3156 sudo vulnerability (dubbed Baron Samedit by Qualys).
PoC for Sudo LPE.
C - mubix/shellshocker-pocs
mubix/shellshocker-pocs
Shellshocker - Repository of "Shellshock" Proof of Concept Code
Collection of Shellshock PoCs.
Python - randorisec/cve-2022-34918-lpe-poc
randorisec/CVE-2022-34918-LPE-PoC
LPE exploit for CVE-2022-34918. This exploit has been written for the kernel Linux ubuntu 5.15.0-39-generic
PoC for Netfilter LPE.
C - yoyosh/darkreplica
yoyosh/DarkReplica
CVE-2026-23631 (DarkReplica) Redis Exploit
Exploit for Redis master-replica synchronization vulnerability.
Python - 0xbinder/cve-2026-0073
0xbinder/CVE-2026-0073
An automated exploit for CVE-2026-0073 (Android ADB TLS Auth Bypass). Features a built-in mDNS/Zeroconf scanner to instantly discover randomized Wireless Debugging ports on Android 13+ and establishes a fully interactive raw PTY shell.
Vulnerability research for ADB authentication bypass.
Python
