Exploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabilities, and Threat Intelligence. Replacing manual searches for elite SOC teams, DevSecOps, and Bug Bounty Hunters.
☆103Nov 7, 2026Updated this week
Alternatives and similar repositories for Exploit-Index
Users that are interested in Exploit-Index are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Linux local privilege escalation via TIOCSTI tty injection.☆14Oct 31, 2026Updated last week
- CVE-2026-2005 — PostgreSQL pgcrypto heap overflow RCE exploit☆18May 5, 2026Updated 6 months ago
- A structured archive of Proof-of-Concept security research, organized by category with metadata, reproduction steps, and references.☆39Oct 31, 2026Updated last week
- ☆14Jun 9, 2026Updated 4 months ago
- CVE-2026-48909 PoC☆24Jul 7, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- CVE-2026-50522 PoC☆44Aug 15, 2026Updated 2 months ago
- Evidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debuggin…☆15Oct 24, 2026Updated 2 weeks ago
- CVE-2026-54121 - CertiGhost AD CS Multi-Exploit Framework | Rogue DC + LDAP spoofing, certificate abuse, PKINIT hash extraction, auto DCS…☆30Sep 29, 2026Updated last month
- CVE-2026-24294 PoC☆61Apr 30, 2026Updated 6 months ago
- Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.☆61Jul 20, 2026Updated 3 months ago
- ☆31Jul 24, 2026Updated 3 months ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- ☆23Jul 6, 2026Updated 4 months ago
- Exploit watch archive, an automated weekly gather of exploit sources 0/Nday releases☆89Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 3 months ago
- RaveX - DLC for 1.21.11 :3☆21Updated this week
- Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM☆37Oct 20, 2026Updated 2 weeks ago
- Pre-auth RCE PoC for WordPress core — chains CVE-2026-63030 (REST /batch/v1 route-confusion desync) with CVE-2026-60137 (author__not_in S…☆17Jul 22, 2026Updated 3 months ago
- Automated proxy DLL generator for DLL hijacking☆26Jun 4, 2026Updated 5 months ago
- EDR evasion uses stealth injection via SendMessage with WM_SETTEXT to effective bypass EDR (Endpoint Detection and Response)☆78Oct 18, 2026Updated 3 weeks ago
- ☆10Feb 20, 2023Updated 3 years ago
- RBCD Attack Path enumeration tool for attackers and defenders☆15Apr 25, 2026Updated 6 months ago
- Apache Solr instances that may be affected by CVE-2026-44825, related to Velocity Template Remote Code Execution (RCE) conditions.☆12Jul 8, 2026Updated 3 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, S…☆28Jun 23, 2026Updated 4 months ago
- PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0☆21Jul 20, 2026Updated 3 months ago
- ENDGAME C2 FRAMEWORK — AI-powered command and control for professional red team operations☆37Oct 6, 2026Updated last month
- Track the lifetime of leaked secrets through git history - detect credential-shaped strings offline and report how long each stayed expos…☆34Oct 26, 2026Updated last week
- ☆10Apr 8, 2024Updated 2 years ago
- Hardener Plus is an advanced security auditing platform for modern web architectures. It employs dynamic profiling and deep heuristics to…☆82Sep 10, 2026Updated last month
- CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfi…☆16Jul 29, 2026Updated 3 months ago
- Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go bin…☆34Updated this week
- CVE-2026-75604 Next.js Windows RCE poc☆109Aug 28, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A x64 binary packer written in Rust.☆34Jul 30, 2026Updated 3 months ago
- Go-based MITM HTTP/HTTPS proxy with HTTP/2 and HTTP/1.1 interception, local CA/per-host cert generation, CONNECT/WebSocket tunneling, di…☆17Jun 10, 2026Updated 4 months ago
- Linux kernel LPE via an io_uring zerocopy page-refcount underflow over AF_VSOCK☆46Aug 14, 2026Updated 2 months ago
- windows api bug☆39May 24, 2026Updated 5 months ago
- ☆14Feb 7, 2024Updated 2 years ago
- Advanced 403/401 Forbidden Bypass Tool & Access Control Fuzzer written in Go.☆16Jul 13, 2026Updated 3 months ago
- Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery☆66Oct 16, 2026Updated 3 weeks ago