Overview

This repository, Exploitarium, serves as a comprehensive, single archive of public exploit Proofs of Concepts (PoCs) and in-depth vulnerability research writeups. It's a curated collection designed to be an accessible entry point for aspiring security researchers and a valuable resource for seasoned professionals. The creator's intention is to foster interest and participation in the field of cybersecurity, believing that practical examples are the most effective learning tool. All included exploits are presented with the understanding that they have not been publicly reported at the time of posting, offering an opportunity for discoverers to claim CVEs.

Key Features

• Extensive PoC Collection: Features a wide array of public exploit Proofs of Concepts across various software and systems, including but not limited to Firefox, 7-Zip, Docker, Ghidra, and Redis.
• Detailed Research Writeups: Each PoC is accompanied by research writeups, offering insights into the vulnerability's mechanics and exploitation.
• AI-Assisted Development Workflow: Leverages AI, specifically GPT-5.3, for an automated fuzzing workflow, demonstrating efficiency in vulnerability discovery. The creator highlights their academic background and years of research in fuzzing methodology, emphasizing that effective workflows and human oversight are key, not solely the model's sophistication.
• Consolidated Archive: Integrates formerly standalone PoC repositories, ensuring a unified and easily navigable resource. A thorough consolidation check confirms data integrity and byte-for-byte file identity.
• Directly Tracked Entries: New research and PoCs are added as self-contained folders, tracked within the repository's commit history.
• Focus on Education and Entry: Intended to attract new talent to cybersecurity by providing hands-on learning materials.

Typical Use Cases

• Learning and Skill Development: Individuals new to cybersecurity can study the provided PoCs and writeups to understand real-world vulnerabilities and exploitation techniques.
• Security Research: Experienced researchers can use this repository as a reference, a starting point for further investigation, or to verify findings.
• Educational Demonstrations: Educators can utilize the contained material to demonstrate exploit concepts in a controlled and ethical learning environment.
• Fuzzing Workflow Inspiration: Researchers interested in optimizing their fuzzing strategies can draw inspiration from the AI-assisted workflow described by the repository's author.