Awesome GitHub RepositoriesExploit Development Tools

pwndbg is a GDB plugin and binary analysis framework designed for reverse engineering, exploit development, and low-level program analysis. It extends the core functionality of the debugger to provide advanced memory inspection and automation tools. The project distinguishes itself with specialized capabilities for heap analysis across glibc, jemalloc, and musl, as well as a comprehensive kernel debugging toolkit for inspecting Linux kernel tasks and slab allocators. It includes an integrated ROP gadget searcher for constructing exploit chains and an LLM-powered debugging assistant that provi

linux-exploit-suggester is a diagnostic utility and vulnerability scanner designed to identify potential kernel exploits on Linux systems. It functions as a privilege escalation auditor by matching system information and kernel versions against a database of known security flaws. The tool differentiates itself by filtering and ranking exploits based on specific system properties and runtime security configurations. It evaluates kernel hardening settings, such as memory protection mechanisms, to discard inapplicable exploits and prioritize candidates by their probability of success. The softw

dirtyfrag, Linux कर्नल विशेषाधिकार वृद्धि के लिए एक प्रूफ-ऑफ़-कांसेप्ट एक्सप्लॉइट है। यह उपयोगकर्ता अनुमतियों को प्रशासनिक रूट स्तरों तक बढ़ाने के लिए पेज-कैश राइट कमजोरियों को लक्षित करता है। यह प्रोजेक्ट एक नियतात्मक एक्सप्लॉइट चेन प्रदर्शित करता है जो xfrm-ESP प्रोटोकॉल इम्प्लीमेंटेशन और RxRPC तंत्र में कमजोरियों के लिए कार्यात्मक प्रूफ-ऑफ़-कांसेप्ट का उपयोग करता है। इन मेमोरी भ्रष्टाचार कमजोरियों को जोड़कर, एक्सप्लॉइट टाइमिंग-आधारित रेस कंडीशंस पर भरोसा किए बिना रूट एक्सेस प्राप्त करता है। यह टूल कर्नल मेमोरी हेरफेर और स्थानीय विशेषाधिकार वृद्धि का परीक्षण करने और Linux भेद्यता अनुसंधान करने के लिए एक्सप्लॉइट चेन के विकास को कवर करता है।

Meltdown is a set of software utilities designed to bypass kernel address randomization and dump physical memory to exploit hardware-level security vulnerabilities. It serves as a proof of concept for the Meltdown hardware vulnerability, enabling the reading of protected kernel memory on affected processors. The tool provides capabilities to identify the secret randomization offset of the direct physical map to locate kernel memory. It also includes functionality to export large segments of physical memory into hexdump format for the recovery of sensitive strings and passwords. The project c

This project is a proof of concept implementation for CVE-2026-31431, serving as a local privilege escalation tool for the Linux kernel. It functions as an exploit that allows a standard user account to obtain root permissions. The tool demonstrates a kernel page cache attack, where root access is achieved by writing shellcode into the cached pages of a privileged binary. This process manipulates how the Linux kernel handles page caches to execute code with elevated permissions. The repository covers areas of Linux security research, including kernel memory corruption analysis and local priv

This project is a technical repository of kernel exploit guides, memory corruption analyses, and archived methods for gaining root access. It serves as a centralized library of security flaws and reproduction steps used for testing system protections and verification. The documentation focuses on the Linux kernel, providing technical breakdowns of how memory management errors and multi-page write techniques allow for the modification of read-only files. It details the use of race conditions to achieve administrative privilege escalation. The repository covers a broad surface of security rese

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

A tool for checking the security hardening options of the Linux kernel

Next-Generation Linux Kernel Exploit Suggester

A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

Dirty Pipe root exploit for Android (Pixel 6)

angrop

poc it like it's hot

kernel privilege escalation enumeration and exploitation framework

An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically

KASLD derandomises the Linux kernel's virtual and physical memory layout as an unprivileged local user.

Android/Linux vmlinux loader

Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.

Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)