bikini/exploitarium

View on GitHub ↗ ★ 5,188 Python

A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've always found this is the most efficient way.

3 mentions on Hacker News by 3 people: 1 story, 2 comments · first 2026-06-27 · latest 2026-06-30

Mentions per year 3 mentions · busiest year 2026 (3)

20082026

All Stories Comments Newest Top Oldest

…//www.vulncheck.com/advisories/libssh2-out-of-bounds-write-via-unchecked-packet-length-in-transport-c https://github.com/bikini/exploitarium/tree/main/libssh2-cve-2026-55200-poc https://web.archive.org/web/20260623211210/https://github.com/…
comment by wildylion · 2026-06-30 · in CVE-2026-55200: libssh2 memory corruption with possible RCE
I took a look at the Ghidra ones (because I use Ghidra), and I'm unimpressed: https://github.com/bikini/exploitarium/blob/main/ghidra-12.1... The first requires being able to overwrite binaries in the Swift tool directory. Yes, if you…
comment by Retr0id · 2026-06-27 · in Anonymous GitHub account mass-dropping undisclosed 0-days
▲ 951
Anonymous GitHub account mass-dropping undisclosed 0-days
story by binyu · 2026-06-27 · 385 comments