jsunpack-n

jsunpack-n jsunpack-n emulates browser functionality when visiting a URL. It's purpose is to detect exploits that target browser and browser plug-in vulnerabilities. It accepts many different types of input: PDF files - samples/sample-pdf.file Packet Captures - samples/sample-http-exploit.pcap HT...

jitsploitation

jitsploitation iOS browser exploit for CVE-2020-9802, an old JIT bug. This is an exploit for a popular JIT compiler bug in the WebKit engine for macOS and iOS originally documented by Project Zero. I re-implemented the exploit for this bug as an exercise in learning browser exploitation. Video...

slipstream

NAT Slipstreaming NAT Slipstreaming permite a un atacante acceder remotamente a cualquier servicio TCP/UDP vinculado a cualquier sistema detrás del NAT de la víctima, evitando el NAT/cortafuegos de la víctima control remoto arbitrario de agujeros en el cortafuegos, simplemente con que la víctima...

sonar.js

sonar.js आंतरिक नेटवर्क होस्ट्स की पहचान करने और उनके विरुद्ध एक्सप्लॉइट लॉन्च करने के लिए एक फ्रेमवर्क। यह WebRTC IP गणना, WebSocket होस्ट स्कैनिंग और बाहरी संसाधन फिंगरप्रिंटिंग के माध्यम से काम करता है। यह कैसे काम करता है? आधुनिक वेब ब्राउज़र में sonar.js पेलोड लोड करने पर निम्नलिखित होगा:...

henkaku

Compilación Solo se admite Linux. Necesitarás: Python 3 Vita SDK Uglify JS paquete node-uglify de Ubuntu 16.04 versión probada 2.4.15 Otras herramientas estándar que ya deberías tener instaladas, como openssl, dd, cat, touch Todas las herramientas deben estar en tu PATH. Ejecuta ./build.sh para...

C2-and-Post-Exploitation-Framework

Capstone Docker Lab Overview and Purpose The victim browses to a hosted webpage. The exploit initiates via shellcode embedded in utils.js runs client-side in the victim's browser via CVE-2021-21220. The shellcode runs on the victim's machine, calls the HTTPS delivery server, downloads...

PyStegosploit

PyStegosploit - Exploit Delivery via Steganography and Polyglots video1 | video2 | page by Charmve - yidazhang1 at gmaildotcom, @Charmve @therealsaumil @amichael May 2021 Stegosploit creates a new way to encode "drive-by" browser exploits and deliver them through image files. These payloads are...

CVE-2016-3861

CVE-2016-3861 Una versión extendida del exploit libutils de Mark Brand, del artículo del blog de Google Project Zero: https://googleprojectzero.blogspot.com/2016/09/return-to-libstagefright-exploiting.html Principales diferencias: todos los archivos mp4 utilizados para la explotación se generan...

CVE-2026-73827

SOY Calendar is affected by a cross-site scripting (XSS) vulnerability that allows an arbitrary script to be executed in the web browser of a user who is logging into the product. The vulnerability requires low privileges and active user interaction , with a CVSS 3.0 base score of 5.4 (MEDIUM) an...

Malicious code in npm-builderio-qwik-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a743cdce28dd141d636ff13baaee44df53fbaaed17efdc5a7380281b7097e1 The package's main entry index.js is a working browser exploit, not a library. When loaded in a DOM context, it creates a hidden iframe pointing at...

📄 WebRemoteControl Unauthenticated Remote Filesystem Access

WebRemoteControl suffers from an unauthenticated remote filesystem access vulnerability. This proof of concept exploit lets you browse directory contents and access files. Exploit Title: WebRemoteControl - Unauthenticated Remote Filesystem Access Date: 2026-04-14 Exploit Author: Chokri Hammedi...

SUSE CVE-2025-64443

MCP Gateway allows easy and secure running and deployment of MCP servers. In versions 0.27.0 and earlier, when MCP Gateway runs in sse or streaming transport mode, it is vulnerable to DNS rebinding. An attacker who can get a victim to visit a malicious website or be served a malicious advertiseme...

New ChatGPT Atlas Browser Exploit Lets Attackers Plant Persistent Hidden Commands

Cybersecurity researchers have discovered a new vulnerability in OpenAI's ChatGPT Atlas web browser that could allow malicious actors to inject nefarious instructions into the artificial intelligence AI-powered assistant's memory and run arbitrary code. "This exploit can allow attackers to infect...

EUVD-2019-3890

Malware in sbrugna...

EUVD-2021-13394

Malware in sbrugna...

EUVD-2016-6112

Malware in sbrugna...

EUVD-2002-0889

Malware in sbrugna...

EUVD-2016-3865

Malware in sbrugna...

EUVD-2018-10222

Malware in sbrugna...

EUVD-2024-51566

Malicious code in bioql PyPI...