330 matches found
jsunpack-n
jsunpack-n jsunpack-n emulates browser functionality when visiting a URL. It's purpose is to detect exploits that target browser and browser plug-in vulnerabilities. It accepts many different types of input: PDF files - samples/sample-pdf.file Packet Captures - samples/sample-http-exploit.pcap HT...
jitsploitation
jitsploitation iOS browser exploit for CVE-2020-9802, an old JIT bug. This is an exploit for a popular JIT compiler bug in the WebKit engine for macOS and iOS originally documented by Project Zero. I re-implemented the exploit for this bug as an exercise in learning browser exploitation. Video...
slipstream
NAT Slipstreaming NAT Slipstreaming permite a un atacante acceder remotamente a cualquier servicio TCP/UDP vinculado a cualquier sistema detrás del NAT de la víctima, evitando el NAT/cortafuegos de la víctima control remoto arbitrario de agujeros en el cortafuegos, simplemente con que la víctima...
sonar.js
sonar.js आंतरिक नेटवर्क होस्ट्स की पहचान करने और उनके विरुद्ध एक्सप्लॉइट लॉन्च करने के लिए एक फ्रेमवर्क। यह WebRTC IP गणना, WebSocket होस्ट स्कैनिंग और बाहरी संसाधन फिंगरप्रिंटिंग के माध्यम से काम करता है। यह कैसे काम करता है? आधुनिक वेब ब्राउज़र में sonar.js पेलोड लोड करने पर निम्नलिखित होगा:...
henkaku
Compilación Solo se admite Linux. Necesitarás: Python 3 Vita SDK Uglify JS paquete node-uglify de Ubuntu 16.04 versión probada 2.4.15 Otras herramientas estándar que ya deberías tener instaladas, como openssl, dd, cat, touch Todas las herramientas deben estar en tu PATH. Ejecuta ./build.sh para...
C2-and-Post-Exploitation-Framework
Capstone Docker Lab Descripción general y propósito La víctima navega a una página web alojada. El exploit se inicia mediante shellcode incrustado en utils.js se ejecuta en el navegador de la víctima a través de CVE-2021-21220. El shellcode se ejecuta en la máquina de la víctima, llama al servido...
PyStegosploit
PyStegosploit - Entrega de Exploits mediante Esteganografía y Políglotas video1 | video2 | página por Charmve - yidazhang1 at gmaildotcom, @Charmve @therealsaumil @amichael Mayo 2021 Stegosploit crea una nueva forma de codificar exploits de navegador "drive-by" y entregarlos a través de archivos ...
CVE-2016-3861
CVE-2016-3861 Una versión extendida del exploit libutils de Mark Brand, del artículo del blog de Google Project Zero: https://googleprojectzero.blogspot.com/2016/09/return-to-libstagefright-exploiting.html Principales diferencias: todos los archivos mp4 utilizados para la explotación se generan...
CVE-2026-73827
SOY Calendar is affected by a cross-site scripting (XSS) vulnerability that allows an arbitrary script to be executed in the web browser of a user who is logging into the product. The vulnerability requires low privileges and active user interaction , with a CVSS 3.0 base score of 5.4 (MEDIUM) an...
Malicious code in npm-builderio-qwik-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a743cdce28dd141d636ff13baaee44df53fbaaed17efdc5a7380281b7097e1 The package's main entry index.js is a working browser exploit, not a library. When loaded in a DOM context, it creates a hidden iframe pointing at...
📄 WebRemoteControl Unauthenticated Remote Filesystem Access
WebRemoteControl suffers from an unauthenticated remote filesystem access vulnerability. This proof of concept exploit lets you browse directory contents and access files. Exploit Title: WebRemoteControl - Unauthenticated Remote Filesystem Access Date: 2026-04-14 Exploit Author: Chokri Hammedi...
SUSE CVE-2025-64443
MCP Gateway allows easy and secure running and deployment of MCP servers. In versions 0.27.0 and earlier, when MCP Gateway runs in sse or streaming transport mode, it is vulnerable to DNS rebinding. An attacker who can get a victim to visit a malicious website or be served a malicious advertiseme...
New ChatGPT Atlas Browser Exploit Lets Attackers Plant Persistent Hidden Commands
Cybersecurity researchers have discovered a new vulnerability in OpenAI's ChatGPT Atlas web browser that could allow malicious actors to inject nefarious instructions into the artificial intelligence AI-powered assistant's memory and run arbitrary code. "This exploit can allow attackers to infect...
EUVD-2019-3890
Malware in sbrugna...
EUVD-2021-13394
Malware in sbrugna...
EUVD-2016-6112
Malware in sbrugna...
EUVD-2002-0889
Malware in sbrugna...
EUVD-2016-3865
Malware in sbrugna...