A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.
☆5,189Sep 16, 2026Updated last month
Alternatives and similar repositories for exploitarium
Users that are interested in exploitarium are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Proof of Concept (PoC) demonstrating the CVE-2026-18220, an out-of-bounds (OOB) write vulnerability in the DLX ELF backend of GNU binutil…☆88Jul 29, 2026Updated 3 months ago
- poc it like it's hot☆1,149Oct 27, 2026Updated last week
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,850Nov 1, 2026Updated last week
- Extract Windows credentials directly from VM memory snapshots and virtual disks☆1,658Updated this week
- RoguePlanet Windows Defender Vulnerability☆19Jun 9, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every …☆8,452Updated this week
- claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md f…☆10,466Oct 12, 2026Updated 3 weeks ago
- Cairn is a general-purpose AI state-space search engine, validated first on autonomous penetration testing. Sometimes misspelled as Carin…☆4,906Sep 7, 2026Updated 2 months ago
- Open-source AI-powered offensive security harness for automated penetration testing.☆3,424Updated this week
- HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity to…☆13,413Aug 3, 2026Updated 3 months ago
- Recon & pentest skill pack. CORS, XSS, SQLi, SSRF, RCE, WordPress, MCP, cloud, subdomain takeover, and more. Field-tested. MIT. Full writ…☆1,329Updated this week
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,653Oct 28, 2026Updated last week
- ☆5,225May 10, 2026Updated 5 months ago
- Adversary Emulation Framework☆12,252Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 备份的漏洞库，3月开始我们来维护☆2,271Oct 20, 2026Updated 2 weeks ago
- A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curat…☆5,479Updated this week
- Fully autonomous AI Agents system capable of performing complex penetration testing tasks☆33,600Oct 22, 2026Updated 2 weeks ago
- Java Vulnerability Exploitation Platform☆2,196Oct 26, 2026Updated last week
- 🚀 2024-至今 1Day 漏洞 PoC 深度研究与复现归档。涵盖 OA、ERP、安防、数通、大模型及容器等 高价值资产漏洞，实战导向，助力安全研究与合规检测。☆1,229Updated this week
- autonomous red teaming platform; multi-agent offensive-security meta-harness☆6,972Sep 8, 2026Updated 2 months ago
- RCE PoC for Redis 6.2.22, 7.4.9, 8.6.4, 8.8.0, 8.8.1☆521Jul 24, 2026Updated 3 months ago
- Community curated list of templates for the nuclei engine to find security vulnerabilities.☆13,300Updated this week
- Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browser…☆292May 18, 2026Updated 5 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 一款综合性网络安全检测和运维工具，旨在快速资产发现、识别、检测，构建基础资产信息库，协助甲方安全团队或者安全运维人员有效侦察和检索资产，发现存在的薄弱点和攻击面。☆4,491Oct 31, 2026Updated last week
- The Network Execution Tool☆5,979Updated this week
- Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands…☆770Updated this week
- 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF …☆35,740Aug 31, 2026Updated 2 months ago
- Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabl…☆32,657Updated this week
- NGINX RCE exploits☆932Jul 25, 2026Updated 3 months ago
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆322Jun 28, 2026Updated 4 months ago
- The Havoc Framework☆8,501Dec 18, 2025Updated 10 months ago
- Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents,…☆3,977Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率☆1,615Updated this week
- This is the tool to dump the LSASS process on modern Windows 11☆681May 23, 2026Updated 5 months ago
- Proof-of-Concept tool for extracting credential material from protected sessions on modern Windows systems.☆752May 9, 2026Updated 5 months ago
- Netlogon and CLDAP vulnerability research with a proof of concept.☆234Jun 2, 2026Updated 5 months ago
- dddd是一款使用简单的批量信息收集,供应链漏洞探测工具，旨在优化红队工作流，减少伤肝的机械性操作。支持从Hunter、Fofa批量拉取目标☆1,948Aug 2, 2024Updated 2 years ago
- ScopeSentry-Cyberspace mapping, subdomain enumeration, port scanning, sensitive information discovery, vulnerability scanning, distribute…☆2,307Oct 11, 2026Updated 3 weeks ago
- wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain☆812Aug 11, 2026Updated 2 months ago