A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
☆21Sep 18, 2026Updated last month
Alternatives and similar repositories for exploitarium
Users that are interested in exploitarium are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminatePr…☆26Sep 12, 2026Updated last month
- Linux Binder binder_free_transaction() process-lifetime use-after-free (CVE-2026-64468): unprivileged PoC + x86_64 LPE. Authorised securi…☆29Aug 20, 2026Updated 2 months ago
- Sleep Obfuscation via CreateThreadpoolTimer☆24Jul 27, 2026Updated 2 months ago
- CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM☆48Jul 16, 2026Updated 3 months ago
- CVE-2026-8452 PreAuth RCE☆65Aug 14, 2026Updated 2 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- CVE-2026-0091, play with an issue in android window management to perform arbitrary code execution in Launcher process from adb☆40Aug 31, 2026Updated last month
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆16Jul 27, 2026Updated 2 months ago
- cve-2026-86060 PoC☆55Sep 23, 2026Updated 3 weeks ago
- This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-…☆62Jun 11, 2026Updated 4 months ago
- ☆18Sep 3, 2026Updated last month
- Code and data for our paper "Onelogon: Taking over Active Directory Accounts via Netlogon" (WOOT’26).☆128Sep 1, 2026Updated last month
- Collection of custom implementations or Userland Primitives about some WinAPI functions☆47Oct 5, 2026Updated 2 weeks ago
- ☆20Jul 31, 2026Updated 2 months ago
- CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC☆33Aug 12, 2026Updated 2 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Download all vault7 documents on Wikileaks☆18Aug 16, 2025Updated last year
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆108Oct 1, 2026Updated 2 weeks ago
- Hook for the PoC for exploiting CVE-2024-32002☆18May 19, 2024Updated 2 years ago
- PoC for CVE-2026-66066 in Ruby on Rails☆23Jul 30, 2026Updated 2 months ago
- Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a page-cache page by 24 bytes. Po…☆18Sep 14, 2026Updated last month
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆37Updated this week
- windows api bug☆39May 24, 2026Updated 4 months ago
- a strictly RFC 4510 conforming LDAP V3 pure Python client. The same codebase works with Python 2. Python 3, PyPy and PyPy3☆10Apr 19, 2025Updated last year
- A tiny infrastructure for Codex to solve CTF challenges in reverse engineering. 3rd in Flare-On 13.☆26Sep 26, 2026Updated 3 weeks ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- A template for Rust based BOF-PEs☆23Apr 5, 2026Updated 6 months ago
- Kernel module to set selinux to permissive for ford (Amazon Fire 7" 2015)☆10Dec 15, 2015Updated 10 years ago
- Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982☆55Jun 1, 2026Updated 4 months ago
- A comprehensive VS Code extension for developing Burp Suite extensions☆14Jul 22, 2025Updated last year
- This contains common OSCP local exploits and enumeration scripts☆12Sep 18, 2015Updated 11 years ago
- ☆95Jul 24, 2026Updated 2 months ago
- 神也自卑 iOS — iOS 全版本安全研究框架☆68Aug 15, 2026Updated 2 months ago
- Gatherer Data Import from WoWHead☆15Feb 25, 2011Updated 15 years ago
- CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, S…☆28Jun 23, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆17Aug 13, 2025Updated last year
- UNFINISHED/WIP - CVE-2026-43499 (IonStack/GhostLock) research POC for Samsung SM-T878U / gts7l. Trigger + geometry verified, NO working r…☆17Oct 6, 2026Updated 2 weeks ago
- Samsung QN90B and QN90F root☆63Sep 28, 2026Updated 3 weeks ago
- Browser Bookmark that will ask for keyword(s) and then color highlight these words on the webpage you visit☆12Nov 15, 2023Updated 2 years ago
- POC tool for ResetNightmare (CVE-2026-27912)☆224Aug 20, 2026Updated 2 months ago
- One-touch, universal root for Samsung devices as uinit:s0☆42Sep 19, 2026Updated last month
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆114Oct 6, 2026Updated 2 weeks ago