BootStomp

BootStomp BootStomp is a boot-loader bug finder. It looks for two different class of bugs: memory corruption and state storage vulnerabilities. For more info please refer to the BootStomp paper at https://seclab.cs.ucsb.edu/academic/publishing/bootstomp-security-bootloaders-mobile-devices-2017 To...

CVE-2024-22262

Spring CVE-2024-22262 Proof of Concept This repo contains a Development Container environment and Spring application of the correct version specifically to explore this CVE. Setup Instructions Clone the repo to your machine and use Docker and your favorite IDE. OR Use GitPod online with...

optee_ftpm

OP-TEE integration for the MS TPM 2.0 Reference Implementation fTPM fTPM TA The fTPM Trusted Application TA provides a secure firmware implementation of a TPM using the MS reference implementation. The platform specific integration code is kept in this repository. This is a fork from the the MS...

TinyXPB

TinyXPB REQUIREMENTS: A Virtual Machine or Bochs running XP SP3 XP SP0 will not work, other versions may USAGE: 1. run build.bat 2. copy floppy.img to wherever you wish to use it 3. set virtual machine / bochs to boot from floppy.img 4. Boot! EXECUTABLES: Tools\MakeImage\imagefs.exe - Commandline...

Centry

Centry WARNING: THIS IS EXPERIMENTAL SOFTWARE. IT IS LIKELY TO CONTAIN BUGS. Updates If you have already installed Centry, please run git pull to update to the latest version. The latest updates make it much more secure against replay attacks. Introduction Centry is a panic button intended to...

log4j2-exploit

Log4Shell CVE-2021-44228 proof of concept Requirement Java JDK/JRE 8 or later version curl exploitable Simple spring boot application that serves a login page with user and password. It logs the user name when POSTed to /. It is not required for the application to log any user provided input...

USP

USP Features This Go program establishes persistence on a Linux system by creating a udev rule that triggers the execution of a specified payload binary or script. It offers two trigger options: USB Persistence: The payload is executed whenever a USB device is inserted. Boot Persistence: The...

CVE-2021-44228-poc

Log4Shell sample vulnerable application CVE-2021-44228 This is an almost copy/similar vulnerable application to https://github.com/christophetd/log4shell-vulnerable-app The main differences are maven instead of gradle, and the usage of rogue-jndi. This repository contains a maven Spring Boot web...

cve-2025-24985

cve-2025-24985 Compute the number of cluster of a VHD file to detect overflow. Supportted boot sectors: MBR GPT Usage python -m cve202524985 -f Setup Nix With direnv: direnv allow Or Without direnv: nix develop Peotry WIP Docker WIP TODO: Auto build libvhdi with poetry Setup poetry install Fix...

CVE-2023-1454

CVE-2023-1454 jeecg-boot unauthorized SQL Injection Vulnerability CVE-2023-1454 Vulnerability| jeecg-boot unauthorized SQL Injection Vulnerability CVE-2023-1454 ---|--- Chinese name| jeecg-boot 未授权SQL注入漏洞（CVE-2023-1454 CVSS core| 9.8 FOFA Query click to view the results directly| title=="JeecgBoo...

log4shell-demo

Simple Spring Boot application which is vulnerable to Log4Shell CVE-2021-44228 Changed default logging framework from logback to log4j2 Application logs 'User-Agent' header, so one can test vulnerability with curl and e.g. interactsh-service: curl -A '$jndi:ldap://interactsh-url/a'...

PongoOS

pongoOS A pre-boot execution environment for Apple boards built on top of checkra1n. Building on macOS Install Xcode + command-line utilities Run make all Building on Linux Install clang if in doubt, from apt.llvm.org Install ld64 and cctools' strip. On Debian/Ubuntu these can be installed from t...

attestos

attestos Experimental Linux boot-attestation image and evidence harness for testing what an anti-cheat vendor could verify instead of relying on a distribution-name allowlist. The mechanism, the threat model, and the vendor specification live in plunder707/attested-gaming. This repository is the...

EvilAbigail

Initrd encrypted root fs attack Scenario Laptop left turned off with FDE turned on Attacker boots from USB/CD/Network Script executes and backdoors initrd User returns to laptop, boots as normal Backdoored initrd loads: Debian/Ubuntu/Kali .so file into /sbin/init on boot, dropping a shell...

CVE-2020-14372

CVE-2020-14372: Bypassing not so Secure Boot with one "simple trick" Vulnerability details One day I typed "help" into GRUB2's console and saw some really "fun" commands: readbyte ADDR: Read 8-bit value from ADDR writebyte ADDR VAL: Write 8-bit value VAL to ADDR I immediately thought I found the...

virt-firmware

Tools for ovmf / armvirt firmware volumes This is a small collection of tools for edk2 firmware images. They support decoding and printing the content of firmware volumes. Variable stores OVMFVARS.fd can be modified, for example to enroll secure boot certificates. virt-fw-dump Decodes and prints...

BlackLotus

BlackLotus BlackLotus aka CVE-2023-24932 remediation scripts for Intune, ConfigMgr, and generic ad-hoc use. Blog post: https://ajf.one/blacklotus General Notes These remediation scripts do NOT initiate any reboots. These are designed to be run "over time", and eventually the device will report as...

CVE-2024-56426

SM-G985F / Exynos9830 Bootrom exploit !CAUTION The current key bundle and generated files are fusing-capable. Once a device has been fused, the eFuse change is irreversible and the device must continue to use boot images and key material that match the fused key. Using these files or flows is at...

log4j2-hack-springboot

log4j2-hack-springboot...

spring-boot-cve-2022-22965

= Spring Framework version override showcase This repository showcases how you can override the Spring Framework version of a Spring Boot 2.4-based application. Spring Boot 2.4.x is https://spring.io/projects/spring-bootsupportout of OSS support, the latest version is 2.4.13. It uses Spring...