Educational PoC for CVE‑2026‑21509 (Microsoft Office security feature bypass). Generates a harmless DOCX with dummy OLE artifacts to study EDR/AV visibility. Not an exploit. For isolated labs only; see README for 7‑Zip inspection steps and mitigation references.
☆42Jan 28, 2026Updated 9 months ago
Alternatives and similar repositories for CVE-2026-21509-PoC
Users that are interested in CVE-2026-21509-PoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆11May 21, 2026Updated 5 months ago
- Quick test for CVE-2023-26025 behaviours☆13Nov 29, 2023Updated 2 years ago
- obfuscation that aims to not stand out☆22Mar 27, 2022Updated 4 years ago
- CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress☆28Updated this week
- PoC for CVE-2021-45897☆18Jan 31, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- CVE-2024-8190: Ivanti Cloud Service Appliance Command Injection☆17Sep 16, 2024Updated 2 years ago
- Exploit scripts for ctf challenges that involves linux kernel pwning☆18Dec 10, 2024Updated last year
- CVE-2026-65643 – cPanel Domain Parking RCE Toolkit (CVSS 8.7) | Red/Blue Team suite for unpatched cPanel & WHM 11.x (110,134,136,138). 2 …☆14Oct 8, 2026Updated 3 weeks ago
- Printer exploitation framework for penetration testing. Discovers printers via PJL scanning, checks for default credentials, and extracts…☆23Oct 8, 2026Updated 3 weeks ago
- A tool for pulling top-10 cves from cvetrend.com. ;)☆14Aug 4, 2022Updated 4 years ago
- LiteSpeed Cache Privilege Escalation PoC☆23Aug 25, 2024Updated 2 years ago
- A radare2 script to parse the gopclntab to facilitate Reverse Engineering Go binaries.☆17Apr 20, 2026Updated 6 months ago
- Gemini4IDA: Gemini for IDA disassembly and program analysis☆14Dec 29, 2023Updated 2 years ago
- 快速对自己项目中引入的第三方开源库进行1day patch检索,patch数据每天晚上11点更新☆21Jan 27, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- CSGO animation code reversed before the public leak was available☆37Apr 10, 2021Updated 5 years ago
- Automate Malicious LNK File Packaging in ZIPs☆15Nov 16, 2024Updated last year
- Google Chrome CVE-2026-6307 PoC☆68Jul 1, 2026Updated 4 months ago
- PoC☆12Apr 7, 2025Updated last year
- A modification to fortra's CVE-2023-28252 exploit, compiled to exe☆57Jan 24, 2024Updated 2 years ago
- Auto exploitation tool for CVE-2024-24401.☆35Sep 7, 2024Updated 2 years ago
- Precision call-stack spoofing gadget hunter for x64 DLLs, powered by Iced disassembler☆20Jul 2, 2026Updated 4 months ago
- A shellcode loader generator with support for multiple injection techniques, built for red team engagements.☆104Jul 1, 2026Updated 4 months ago
- Surgical x64 VEH/VCH dumper. Walks the vectored exception handler list, extracts each handler as a standalone PE64 that IDA opens directl…☆20Jul 17, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆11May 27, 2024Updated 2 years ago
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆38Oct 27, 2026Updated last week
- loader to switch from aarch32 to aarch64 and boot☆12Jul 4, 2017Updated 9 years ago
- PsSetCreateProcessNotifyRoutine/Ex/Ex2 hook☆13May 30, 2024Updated 2 years ago
- Perform with Massive Command Injection (Chamilo)☆23Jul 31, 2023Updated 3 years ago
- An exploit proof of concept for ConnectWise SecureConnect authentication bypass vulnerability.☆13Feb 20, 2024Updated 2 years ago
- ☆14Oct 1, 2025Updated last year
- PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy☆35Oct 24, 2023Updated 3 years ago
- ExchangeHound is a defensive BloodHound OpenGraph collector for on-prem Microsoft Exchange that maps mailbox delegation and Exchange priv…☆77Apr 17, 2026Updated 6 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- CVE-2023-21823 PoC☆14Apr 20, 2023Updated 3 years ago
- CVE-2022-37042 Zimbra Auth Bypass leads to RCE☆28Dec 9, 2022Updated 3 years ago
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆14Jul 9, 2023Updated 3 years ago
- Run PowerShell command without invoking powershell.exe☆27Apr 9, 2026Updated 6 months ago
- Header-only C++23 networking library built on standalone Asio. WebSocket client, HTTP/1.1 server (WIP), sync and async APIs, optional TLS…☆23Oct 10, 2026Updated 3 weeks ago
- CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM☆25Aug 13, 2026Updated 2 months ago
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆82Jul 10, 2026Updated 3 months ago