Social-media-c2
woj-ciech/social-media-c2Script is a proof of concept how to control your machine by using social media sites.
command-and-controlinformation-gatheringosint-social-engineering+3
23
woj-ciech/social-media-c2Script is a proof of concept how to control your machine by using social media sites.
xaff-xaff/kernel-process-hollowingWindows x64 kernel mode rootkit process hollowing POC.
matthewwiese/hinge-command-control-c2A proof of concept demonstrating how to use the Hinge dating app as a C2.
hderms/dh-cve_2016_2098Proof of concept showing how CVE-2016-2098 leads to remote code execution
themehackers/cve-2025-54100CVE-2025-54100 (CVSS 7.8 High) is a command injection vulnerability in the Invoke-WebRequest cmdlet of Windows PowerShell 5.1. It arises from…
hanakim3945/bl_sbxitunesstored & bookassetd sbx escape
s0ld13rr/claude-code-backdoorBackdooring Claude Code via hooks in settings.json. Authorized use only!
percivalll/dirty-frag-kubernetes-pocProof-of-concept demonstrating container escape on Amazon EKS by exploiting Dirty Frag (CVE-2026-43284) kernel page-cache corruption via shared image…
starscow/copy-fail-cve-2026-31431-kubernetes-pocProof-of-concept demonstrating container escape on Kubernetes via CVE-2026-31431 kernel page-cache corruption, achieving node-level code execution…
duo-labs/mysslstripProof-of-concept tool demonstrating MITM attack to strip SSL/TLS from MySQL connections, exploiting CVE-2015-3152 for network penetration testing.
skilfoy/cve-2024-4323-exploit-pocThis proof-of-concept script demonstrates how to exploit CVE-2024-4323, a memory corruption vulnerability in Fluent Bit, enabling remote code…
danielhallbro/cve-2025-29927-nextjs-bypass-pocA Proof of Concept for CVE-2025-29927 demonstrating a middleware bypass in Next.js versions prior to 13.5.9
jofpin/ifaPoC exposing a critical IndexedDB vulnerability that enables a disk flooding attack by exploiting the lack of restrictions.
ygouzerh/cve-2017-12617Proof of Concept - RCE Exploitation : Web Shell on Apache Tomcat - Ensimag January 2018
nbs32k/localstrangerPoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.
oxydev2/clearml-cve-2024-24590Proof of concept for CVE-2024-24590
open-flaw/cve-2026-25940Proof-of-concept for CVE-2026-25940 demonstrating embedded JavaScript execution via crafted AcroForm radio button appearances in PDF viewers, with…
akshayithape-devops/cve-2022-42889-pocA simple dockerize application that shows how to exploit the CVE-2022-42889 vulnerability.