A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
☆21Sep 18, 2026Updated last month
Alternatives and similar repositories for exploitarium
Users that are interested in exploitarium are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆28Jun 29, 2026Updated 4 months ago
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, S…☆28Jun 23, 2026Updated 4 months ago
- cve-2026-86060 PoC☆58Sep 23, 2026Updated last month
- RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminatePr…☆26Sep 12, 2026Updated last month
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- An MCP server wrapping `kd.exe` for Windows kernel debugging☆18May 13, 2026Updated 5 months ago
- Sleep Obfuscation via CreateThreadpoolTimer☆24Jul 27, 2026Updated 3 months ago
- meowless kaspersky☆15Sep 6, 2026Updated 2 months ago
- Linux Binder binder_free_transaction() process-lifetime use-after-free (CVE-2026-64468): unprivileged PoC + x86_64 LPE. Authorised securi…☆29Aug 20, 2026Updated 2 months ago
- Rogue vSphere server that captures credentials from Veeam Backup & Replication.☆17Sep 3, 2026Updated 2 months ago
- A collection of various exploits☆31Sep 17, 2024Updated 2 years ago
- An offensive-security methodology that an AI coding agent can actually execute — 88 class docs, 6 agents, 24 scripts, evidence-first vali…☆26Nov 2, 2026Updated last week
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆112Oct 27, 2026Updated 2 weeks ago
- CVE-2026-32475 The Elementor Pro Forms File Upload field handles validation and file processing in two separate loops with different han…☆13Aug 21, 2026Updated 2 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- ☆12Nov 27, 2023Updated 2 years ago
- ☆14Jun 9, 2026Updated 5 months ago
- OSINT suite for darkweb data acquisition and cross-platform identity correlation.☆17Oct 7, 2026Updated last month
- This repository is for setting up the global VPN on Linux☆10May 30, 2021Updated 5 years ago
- ☆11Jan 5, 2021Updated 5 years ago
- Toolkit for Windows internals, vulnerability analysis, and reproducible security research workflows.☆67Jun 23, 2026Updated 4 months ago
- SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smu…☆58Oct 13, 2026Updated 3 weeks ago
- Fortigate VPN-SSL Honeypot☆13Jun 28, 2026Updated 4 months ago
- Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).☆129Sep 1, 2026Updated 2 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- macOS revisiond local privilege escalation to root (CVE-2026-112487)☆18Oct 31, 2026Updated last week
- Honeypot detection toolkit☆12Jun 14, 2026Updated 4 months ago
- As system user the provided code allows reading from and writing to the steady and param partitions in most flagship Samsung devices up t…☆13Aug 8, 2026Updated 3 months ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- A sophisticated, cross-platform exploit generator for **CVE-2026-34621** – a critical prototype pollution vulnerability in Adobe Acrobat …☆13Apr 15, 2026Updated 6 months ago
- mitigation of cve-2026-31431 using ftrace☆12May 12, 2026Updated 5 months ago
- Files for my solution to the SSTIC 2021 challenge☆15Jun 14, 2021Updated 5 years ago
- Android front end for CVE-2026-98260: root shell + KernelSU late-load through Shizuku☆66Nov 3, 2026Updated last week
- pfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - QinQ parent-if ifconfig☆19Oct 28, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- KARR Scan passively scans for KARR Security devices and displays their telemetry☆15Aug 28, 2026Updated 2 months ago
- windows api bug☆39May 24, 2026Updated 5 months ago
- Hook for the PoC for exploiting CVE-2024-32002☆18May 19, 2024Updated 2 years ago
- a strictly RFC 4510 conforming LDAP V3 pure Python client. The same codebase works with Python 2. Python 3, PyPy and PyPy3☆10Apr 19, 2025Updated last year
- Automatically switch Android's Private DNS (DNS-over-TLS) based on the app you open. No VPN, no tracking, open source.☆23Oct 12, 2026Updated 3 weeks ago
- CVE-2026-83991: Windows Cloud Files access-check bypass☆18Oct 13, 2026Updated 3 weeks ago
- Neo4jWordlistHarvester but then with bloodhound json files☆13Jun 10, 2025Updated last year
Are these results useful?