Awesome-Fuzzing

Benvenuto in Awesome Fuzzing Una lista curata di risorse sul fuzzing libri, corsi - gratuiti e a pagamento, video, strumenti, tutorial e applicazioni vulnerabili su cui esercitarsi per imparare il fuzzing e le fasi iniziali dello sviluppo di exploit come l'analisi delle cause profonde. Contenuti...

CVE-2010-0232

CVE-2010-0232 विंडोज सिस्टम्स NT / 2k / XP / 2K3 / VISTA / 2k8 / 7 में प्रिविलेज एस्केलेशन के लिए एक एक्सप्लॉइट का विकास, कमजोरी CVE-2010-0232 का उपयोग करते हुए। यह एक शैक्षिक परियोजना है जो मैंने लो-लेवल कर्नेल एक्सप्लॉइट्स के भयानक विवरण सीखने के लिए शुरू की है, यह मेरा पहला ऐसा एक्सप्लॉइट है।...

bluekeep_CVE-2019-0708_poc_to_exploit

Hinweis: Dieses Projekt wurde archiviert, da anderswo tatsächliche Exploits mit größerem Erfolg entwickelt wurden. https://blog.rapid7.com/2019/09/06/initial-metasploit-exploit-module-for-bluekeep-cve-2019-0708/ Abzeichen bluekeepCVE-2019-0708poctoexploit Portierung des BlueKeep PoC von @Ekultek ...

bst

Binary String Toolkit Zusammenfassung Das Binary String Toolkit kurz BST ist ein recht einfaches Dienstprogramm, um Binärstrings in verschiedene Formate zu konvertieren, die für die Einbindung in Quellcodes geeignet sind, wie sie beispielsweise zur Entwicklung von Exploits und Proof of Concepts i...

CVE-2025-5548

भेद्यता विश्लेषण और शोषण की पद्धति लेखक: अनास रामी मॉड्यूल: 6. भेद्यताएँ - साइबर सुरक्षा में मास्टर उद्देश्य: भेद्यता विश्लेषण, एक्सप्लॉइट विकास और 0-दिनों तक पहुँच पर तकनीकी प्रस्ताव, प्रयोगशाला वातावरण और व्यावहारिक मामलों का दस्तावेज़ीकरण। 1. पद्धतिगत दृष्टिकोण और मानसिकता भेद्यता विश्लेषण का...

heap-viewer

HeapViewer Un plugin per IDA Pro per esaminare l'heap, focalizzato sullo sviluppo di exploit. Attualmente supporta l'implementazione glibc malloc ptmalloc2. 3° classificato al Concorso Plugin Hex-Rays 2018 Requisiti IDA Pro = 7.0 Testato su glibc 2.23 = 2.26 GraphView per liste collegate...

Ponce

Ponce Ponce pronunciato 'poN θe pon-they è un plugin per IDA Pro che fornisce agli utenti la possibilità di eseguire l'analisi di taint e l'esecuzione simbolica su binari in modo facile e intuitivo. Con Ponce sei a un clic di distanza da tutta la potenza dell'esecuzione simbolica all'avanguardia...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

peda

peda PEDA – Python Exploit Development Assistance für GDB Hauptfunktionen: Verbesserte Darstellung von gdb: Farbige und übersichtliche Anzeige von Disassemblierungen, Registern, Speicherinformationen während des Debuggens. Befehle zur Unterstützung des Debuggens und der Exploit-Entwicklung...

CVE-2017-13089

CVE-2017-13089 wget v1.19.1 für die Exploit-Entwicklung. HINWEIS Dies ist kein funktionierender Exploit – noch in Entwicklung. Verwendung root@kitploit: Build the container docker build -t cve201713089 . OR ... docker pull robertcolejensen/cve201713089 Play around in the container, src will be...

CVE-2021-3156

CVE-2021-3156 CVE-2021-3156: Sudo Heap-Overflow-Exploit für Debian 10 Schwachstellenanalyse und Exploit-Entwicklung: https://syst3mfailure.io/sudo-heap-overflow Exploit entwickelt für: Sudo: root@kitploit: Version 1.8.27 1.8.27-1+deb10u1 Prüfsumme sha256:...

CVE-2023-2033-Analysis

CVE-2023-2033-Analysis Il rapporto completo sul bug è stato pubblicato: https://bugs.chromium.org/p/chromium/issues/detail?id=1432210 Uso questo repository per organizzare le informazioni su CVE-2023-2033. Se hai trovato utile questa risorsa o hai opportunità di lavoro in ambito sicurezza per me,...

CVE-2018-4416-exploit

Preface :PROPERTIES: :CUSTOMID: preface :END: Ok, la sicurezza binaria non è solo /heap/ e /stack/, abbiamo ancora molto da scoprire oltre alle normali sfide CTF. Browser, Virtual Machine e Kernel giocano tutti un ruolo importante nella sicurezza binaria. E ho deciso di studiare prima il browser...

heap-viewer

HeapViewer An IDA Pro plugin to examine the heap, focused on exploit development. Currently supports the glibc malloc implementation ptmalloc2. 3rd place winner of the 2018 Hex-Rays Plugin Contest Requirements IDA Pro = 7.0 Tested on glibc 2.23 = 2.26 GraphView for linked lists bins/tcache Struct...

CVE-Exploit-Research-Development-ITSOLERA

Dieses Repository hat keine README-Datei...

ronin

ronin Website Source Issues Documentation Discord | Mastodon Description Ronin is a free and Open Source Ruby toolkit for security research and development. Ronin contains many different CLI commands and Ruby libraries for a variety of security tasks, such as encoding/decoding data, filter...

peda

peda PEDA - Python Exploit Development Assistance for GDB Key Features: Enhance the display of gdb: colorize and display disassembly codes, registers, memory information during debugging. Add commands to support debugging and exploit development for a full list of commands use peda help: aslr --...

bst

Binary String Toolkit Summary The Binary String Toolkit or BST for short is a rather simple utility to convert binary strings to various formats suitable for inclusions in source codes, such as those used to develop exploits and Proof of Concepts in the security field. Features Convert and dump...

AI_HACKING

AIHACKING Sammlung von CVE-Arbeiten zum Pwning von tenserflow-Binaries FÜR CVE202223591WORAN NOCH GEARBEITET WIRD: ICH MUSS HERAUSFINDEN, WIE ICH JSON ZURÜCK IN PROTOBUF UMWANDLE UND DANN with tf.io.gfile.GFile'test.pb', 'rb' as f: graphdef = tf.compat.v1.GraphDef print"aiciaaaaaaaaaaaaaa"...

ntoskrnl-metadata

ntoskrnl-metadata Ein IDA-Python-Skript zum Extrahieren kritischer Kernel-Metadaten aus Windows-ntoskrnl.exe-Binärdateien. Dieses Tool extrahiert automatisch Funktions-RVAs und EPROCESS-Strukturoffsets, die für die Entwicklung von Exploits gegen CVE-2026-40369 und andere Kernel-Schwachstellen...