Side-note: I have a back-log of exploits to publish, they will be published soon when I complete my current research (or at least come to a conclusion).

A repository containing all of the exploits I wrote and published (and usually ones I discovered). This repository does not and will not contain any CVEs published under my real name or in any way associated with my real name for privacy reasons.

Each exploit that I wrote will receive its own README eventually. Some will have some basic details, and others I may spend more time on to show the root cause, exploitation, and other things. If none are already present, I either forgot or I'm already planning on adding them soon.

If an exploit does not have a corresponding CVE, it will either use a ZDI-provided ID (either ZDI-??-???? or ZDI-CAN-?????) or CVE-????-?????-n, where n is the nth exploit I've written without a CVE. Because I cannot add question marks to the names of files or folders (without doing some weird hacks), I will be using the format "CVE-UNKNOWN-UNKNOWN-n".

There are three directories in this repository:

My CVEs: A directory containing all of my own discoveries given the criteria provided above. Some will be a DoS, others will be fully "weaponized". At any rate, these are 100% my own exploits.

My Exploits: A directory containing all of my exploits for vulnerabilities I did not discover. A good example is the RWEverything exploit; I did not find the bug initially, but I did write up an exploit for it. So, it goes here.

Exploits: A directory containing exploits that I did NOT write. The reasoning for adding this is so I (and potentially even yourself) can quickly fetch exploits that do not already exist in popular repositories (e.g. nomi-sec's PoC-in-GitHub, ZDI's PoC, etc.)