GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image
☆59Oct 16, 2026Updated this week
Alternatives and similar repositories for CVE-2026-97229-PoC
Users that are interested in CVE-2026-97229-PoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2026-75604 Next.js Windows RCE poc☆105Aug 28, 2026Updated last month
- A poor man's attempt to replicate the shellcode execution technique demo'd by @3lk during STHACK 2026 (https://www.youtube.com/watch?v=al…☆24Updated this week
- ☆45Updated this week
- ☆39Sep 8, 2026Updated last month
- POC pre-auth RCE on Exchange☆185Aug 22, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CVE 1-day in http.sys☆39Sep 4, 2026Updated last month
- 面向授权环境的自动化资产测绘 + 漏洞扫描工具，基于原 dddd 的设计思路做现代化重写，覆盖指纹识别、弱口令、nuclei POC、Shiro 专项检测和 HTML 报告。☆32Updated this week
- Unauthenticated RCE PoC for exposed DeepSeek Harness (dsh) web instances.☆57Aug 22, 2026Updated last month
- Capability extraction from Time Travel Debugging Traces with C++ Implementation of CAPA that supports code scanning☆31Sep 24, 2026Updated 3 weeks ago
- Gadget scanner that finds ROP gadgets inside any Windows DLL☆47Jun 18, 2026Updated 4 months ago
- Cobalt Strike BOF for extracting Firefox passwords and cookies. Decrypts saved credentials using NSS, supports key3.db/key4.db, logins.js…☆42Jul 5, 2026Updated 3 months ago
- Next.js RCE☆50Sep 29, 2026Updated 2 weeks ago
- ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments☆93Sep 16, 2026Updated last month
- RPC计划任务维权-过核晶☆14May 19, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- CVE proof-of-concept labs, exploit scripts, and detection/prevention rules (Nginx, Apache, Snort, YARA) for high-severity CVEs. Authorize…☆113Updated this week
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Of…☆31Sep 23, 2026Updated 3 weeks ago
- ☆17Sep 2, 2026Updated last month
- ☆38Sep 22, 2026Updated 3 weeks ago
- Mythic C2 MSTeams Communication Channel☆39Sep 13, 2026Updated last month
- EntraTrace is a defensive security research tool for tracking and identifying the behavior of offensive tooling targeting Microsoft Entra…☆122Updated this week
- Silverseal is an open-source Linux bootkit and rootkit framework written in Rust, using UEFI and early kernel boot hooks to load a stealt…☆172Oct 8, 2026Updated last week
- ☆24Sep 12, 2026Updated last month
- 二开artex的代码审计平台 | 新增本地反编译java依赖库 | 多账号管理☆92Updated this week
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- SilentChrome-BOF installs Chromium extension, native messaging, and Isolated Web App profile artifacts☆52Aug 10, 2026Updated 2 months ago
- Proof-of-Concept for Authorization Bypass in Next.js Middleware☆20Mar 23, 2025Updated last year
- Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-writ…☆108Aug 16, 2026Updated 2 months ago
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆40Sep 20, 2026Updated 3 weeks ago
- Certighost POC☆333Jul 28, 2026Updated 2 months ago
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated 3 weeks ago
- Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.…☆43Sep 11, 2026Updated last month
- example use of defining your own injection technique for explicit injection and or spawn (fork & run)☆19Jan 3, 2026Updated 9 months ago
- Abuses the Credential Provider interface to steal plaintext passwords from logonui.exe via CredProvDataModel.dll hooks☆73Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- IP obfuscation and URL generator.☆48Dec 8, 2025Updated 10 months ago
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆65Sep 11, 2026Updated last month
- A WordPress rest-enumeration script☆10Jun 3, 2026Updated 4 months ago
- ☆19Oct 2, 2022Updated 4 years ago
- A way to maintain long-term access to Windows LAPS for lateral movement in AD via installing an Offensive LAPS RPC backdoor on a DC.☆32Jun 9, 2025Updated last year
- A threat hunting process☆142Oct 2, 2026Updated 2 weeks ago
- Designed for managing vulnerability discovery at scale with agentic AI and integrates with HackerOne.☆134Sep 2, 2026Updated last month