Exploit-Development

Exploit-Development Weaponized Exploit and Proof of Concepts PoC...

twiga

Twiga A tool that enumerates Android devices for information useful in understanding its internals and for exploit development. It supports android 4.2 to android 7.1.1 Requirements The most current ADB must be in your path and fully functional The report name must not have any whitespace...

CVE-2022-22947-exp

CVE-2022-22947-exp Reproduced the CVE-2022-22947 vulnerability, wrote an exploit exp Later, based on an article by a senior, wrote an exp for memory horse injection, for reference only...

AI_HACKING

AIHACKING Collection of CVEwork on tenserflow binary pwning it FOR CVE202223591WHICH IS STILL UNDER WORK I NEED TO FIGURE OUT HOW TO TURN BACK JSON TO PROTOBUF AND THAN DO with tf.io.gfile.GFile'test.pb', 'rb' as f: graphdef = tf.compat.v1.GraphDef print"aiciaaaaaaaaaaaaaa" printgraphdef...

CVE-2025-5548

Vulnerability Analysis and Exploitation Methodology Author: Anas Rami Module 6: Vulnerabilities - Master in Cybersecurity Objective: Technical proposal on vulnerability analysis, exploit development, and approach to 0-days, documenting the laboratory environment and practical cases. 1...

CVE-2024-0692-SolarWinds-SEM-RCE

CVE-2024-0692-SolarWinds-SEM-RCE Based on my research during a penetration test, see the details here https://www.sprocketsecurity.com/blog/cve-2024-0692-building-the-exploit-that-didnt-exist...

bluekeep_CVE-2019-0708_poc_to_exploit

Note: This project has been archived as actual exploits have been developed elsewhere with better success. https://blog.rapid7.com/2019/09/06/initial-metasploit-exploit-module-for-bluekeep-cve-2019-0708/ Badges bluekeepCVE-2019-0708poctoexploit Porting BlueKeep PoC from @Ekultek & @umarfarook882 ...

cve-2026-40369-exploit

This references https://voidsec.com/cve-2026-40369-browser-sandbox-escape/, the approach differs significantly from https://github.com/orinimron123/CVE-2026-40369-EXPLOIT, and since I didn't see any public exp from them, I documented it...

ntoskrnl-metadata

ntoskrnl-metadata An IDA Python script for extracting critical kernel metadata from Windows ntoskrnl.exe binaries. This tool automatically extracts function RVAs and EPROCESS structure offsets required for developing exploits targeting CVE-2026-40369 and other kernel vulnerabilities. Purpose This...

CVE-2021-3156

CVE-2021-3156 CVE-2021-3156: Sudo heap overflow exploit for Debian 10 Vulnerability analysis and exploit development: https://syst3mfailure.io/sudo-heap-overflow Exploit designed for: Sudo: Version 1.8.27 1.8.27-1+deb10u1 Checksum sha256:...

Exploit-Development

Developed Exploits This repository will contain any exploit or proof of concept code I release publicly. In addition to this, I will include Metasploit Modules, and ported exploits. Metasploit Modules This directory will contain all Metasploit modules I've developed. Note that code within this...

CVE-2017-13089

CVE-2017-13089 wget v1.19.1 for exploit dev. NOTE This is not a working exploit - under development. Usage Build the container docker build -t cve201713089 . OR ... docker pull robertcolejensen/cve201713089 Play around in the container, src will be mounted at /opt/CVE-2017-13089/src ./run.sh...

webapp-exploits

webapp-exploits Web Application Exploit Development...

gef

GEF pronunciado ʤɛf - "Jeff" es un conjunto de comandos para x86/64, ARM, MIPS, PowerPC y SPARC para ayudar a desarrolladores de exploits e ingenieros inversos cuando usan el clásico GDB. Proporciona funcionalidades adicionales a GDB mediante la API de Python para asistir durante el proceso de...

peda

peda PEDA - Asistencia de Desarrollo de Exploits en Python para GDB Características principales: Mejora la visualización de gdb: colorea y muestra los códigos de desensamblado, registros e información de memoria durante la depuración. Añade comandos para soportar la depuración y el desarrollo de...

py3webfuzz

Py3webFuzz ';-- Python Biblioteca de módulo de fuzzing web Python3 Module Compatible Autor Jonathan Angeles @ex0day Github: https://github.com/jangelesg/py3webfuzz Contribuyentes Nathan Hamiel @nathanhamiel DESCRIPCIÓN Basado en pywebfuzz, Py3webfuzz es un módulo de Python3 que ayuda a identifica...

twiga

Twiga Una herramienta que enumera dispositivos Android para obtener información útil para comprender su funcionamiento interno y para el desarrollo de exploits. Soporta android 4.2 a android 7.1.1 Requisitos La versión más actual de ADB debe estar en tu PATH y completamente funcional El nombre de...

CVE-2023-2033-Analysis

CVE-2023-2033-Analysis The full bug report has been published: https://bugs.chromium.org/p/chromium/issues/detail?id=1432210 Using this repository to organize information on CVE-2023-2033. If you found this resource helpful or have any job opportunities in security for me, please reach out!...

pwndbg

pwndbg pwndbg /paʊnˈdiˌbʌɡ/ è un plug-in per GDB e LLDB che rende il debugging meno doloroso, con un focus sulle funzionalità necessarie a sviluppatori di software di basso livello, hacker hardware, reverse engineer e sviluppatori di exploit. Ha un'infinità di funzionalità, consulta la nostra...

CVE-2021-41773-Exploit-Lab

CVE-2021-41773 — Exploit Development Lab Overview This project documents the research, reproduction, and Proof-of-Concept PoC development for CVE-2021-41773, a Path Traversal vulnerability affecting Apache HTTP Server 2.4.49. The vulnerability was reproduced in an isolated Docker laboratory...