Exploits

A security research tool for simulating targeted phishing campaigns using CVE-2024-21413 (Moniker Link).

CVE-2026-55200

CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, Sysmon/ETW detection rules.

Proof of Concept (PoC) for the TP-Link DHCP Option 66 Unauthenticated RCE (CVE-2026-11834)

This repository contains the Proof of Concept (PoC) exploit script for CVE-2026-45156

Apache Tomcat CGI Servlet RCE (Windows) — Educational PoC

Execute local privilege escalation on networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.

CVE-2026-11837: local privilege escalation in the ansible.posix authorized_key module via symlink-following chown. Technical writeup; sibling of CVE-2024-9902.

Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.

Fuzzing the Microsoft Windows DNS client library. Inspired by CVE-2026-41096.

Public advisory for CVE-2026-39253, addressing an insecure deserialisation in Pivotal CRM 6.6.04.08 allowing remote code execution via unsafe BinaryFormatter usage in Smart Client and PBS components. Includes vulnerability details, affected versions, and remediation guidance.

Prueba de concepto de CVE-2021-41773

Mutation testing on X.509 Certificate Validation IN OpenSSL v.1.1.1h, based on CVE-2021-3450.

aaPanel WebSocket CSRF Bypass leading to RCE (Incomplete fix for CVE-2021-37840)

CVE-2026-40369本地权限提升漏洞exp

A minimal PoC for CVE-2026-21018, demonstrating how it works

Static analysis of 2 malicious Office documents on REMnux using oletools; identified CVE-2017-11882 and obfuscated macros.

Vulnerability proof of concept reworked from https://github.com/utmost3/cve/issues/2 I take no credit for discovering the vulnerability. This is for educational and portfolio purposes only.