AWE

AWE: 동적 웹 침투 테스트를 위한 적응형 에이전트 Akshat Singh Jaswal · Ashish Baghel NDSS LAST-X 2026에서 채택됨 초록 현대 웹 애플리케이션은 AI 지원 개발 및 신속한 노코드 배포 파이프라인을 통해 점점 더 많이 생산되면서, 가속화되는 소프트웨어 속도와 기존 보안 도구의 제한된 적응성 사이의 격차가 벌어지고 있습니다. 우리는 구조화된 취약점별 분석 파이프라인을 경량 LLM 오케스트레이션 계층에 내장하는 메모리 강화 다중 에이전트 프레임워크인 AWE를 소개합니다. 104개 챌린지로...

heartbleed-poc

HeartBleed 테스터 및 익스플로잇 NB 현재 대부분의 도구nmap, metasploit, nessus, 심지어 burp는 가장 최신 버전의 스캐너를 갖추고 있습니다. 이 도구들은 도구가 아직 개발 중이던 초기 단계에 출시되었습니다. 지금은 이것들보다는 그 도구들을 사용하는 것이 좋습니다. 도구 가이드 대량 스캔을 원한다면 NMAP 스크립트가 현재 최선의 선택입니다. 가장 많은 프로토콜STARTTLS을 지원하려면 수정된 Metasploit 스크립트를 확인하세요. 실제로 익스플로잇을 수행하려면 Python 스크립트를...

CVE-2022-22947-exp

CVE-2022-22947-exp Reproduced the CVE-2022-22947 vulnerability and wrote an exploit exp Later, based on an article by a senior researcher, wrote an exp for memory webshell injection, for reference only...

CVE-2025-13834-A-Bluetooth-RFCOMM-Out-of-Bounds-Read-Vulnerability-in-Modern-Wireless-Devices

= doi.org/10.5281/zenodo.18323302 = orcid.org/0009-0007-7728-256X README.md: CVE-2025-13834 RFCOMM Bluetooth "Heartbleed" Exploitation Framework Author: Sastra Adi Wiguna Purple Elite Teaming Date: January 20, 2026 Version: 1.0 Full-System Replication License: RED TEAM USE ONLY Do not distribute...

CVE-2026-98365

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA software driver. An unauthenticated remote attacker can cause a Denial of Service DoS or out-of-bounds memory access by sending specially crafted network requests that trigger an integer overflow during memory range validatio...

CVE-2026-98175

A flaw was found in the Linux kernel's Server Message Block SMB client. This flaw allows a malicious server or network disruption to cause a Denial of Service DoS or memory corruption. The issue occurs because the client fails to cancel queued reconnection tasks before freeing connection tracking...

CVE-2026-98363

A flaw was found in the Linux kernel's ARM System Control and Power Interface SCPI driver. The driver fails to validate the upper bound of operating performance points returned by system firmware during power management configuration. A compromised or malicious firmware environment could return a...

CVE-2026-93019

A signed integer conversion flaw was found in the Perl Imager library's TGA file reader. The colourmaplength field in the TGA header is declared as a signed short int. A TGA file with a colour map length of 32768 or greater causes the value to become negative, which sign-extends to a value near...

CVE-2025-14847---MongoBleed

Mongobleed CVE-2025-14847 – Go Proof of Concept This repository contains a Go proof-of-concept exploit for CVE-2025-14847 , a MongoDB memory disclosure vulnerability commonly referred to as Mongobleed. This PoC is a Go reimplementation of the original Python exploit by Joe Desimone , available...

CVE-2011-0762

CVE-2011-0762 Exploit C exploit for the CVE-2011-0762 vulnerability in FTP servers that allows sending a STAT command with a malicious payload to cause potential crashes or unwanted execution. Description This exploit connects to an FTP server and authenticates using a provided username and...

rdg_scanner_cve-2020-0609

Scanning for Remote Desktop Gateways Potentially unpatched CVE-2020-0609 and CVE-2020-0610 The scanner has 2 modes of operation: Check for systems vulnerable to CVE-2020-0609 on UDP 3391 Uses the vuln scan code of https://github.com/MalwareTech/RDGScanner Disclaimer Scanning for memory corruption...

Meltdown

Meltdown PoC for Meltdown in linux CVE-2017-5754 Useage cd meltdown make ./meltdown address size Example Refer http://zzado.tistory.com/category/Report...

pcileech

PCILeech 요약: PCILeech는 PCIe 하드웨어 장치를 사용하여 대상 시스템 메모리를 읽고 씁니다. 이는 PCIe를 통한 DMA를 사용하여 달성됩니다. 대상 시스템에는 드라이버가 필요하지 않습니다. PCILeech는 또한 하드웨어 없이도 LeechCore 라이브러리에서 지원하는 다양한 소프트웨어 메모리 획득 방법과 함께 작동합니다 - DumpIt 또는 WinPmem을 사용한 원격 라이브 메모리 캡처를 포함합니다. PCILeech는 또한 로컬 메모리 캡처와 여러 메모리 덤프 파일 형식을 지원합니다. PCILeech는 ...

CVE-2026-49975-HTTP-2-Bomb

A triage not exploitation tool to identify attack surfaces exposed to CVE-2026-49975 — "HTTP/2 Bomb". ⚠️ This script does not send attack payloads. It only makes normal HTTP requests and analyzes response headers to flag hosts that warrant manual version/patch verification. About CVE-2026-49975...

CVE-2014-4322_poc

CVE-2014-4322poc poc code works on Nexus Android 4.4/5.0 Gain privileges:system - root,as a part of https://github.com/retme7/CVE-2014-7911poc author: retme [email protected] @returnsme on twitter & @retme on weibo website: retme.net The exploit must be excuted as system privilege and severa...

CVE-2025-14174-Poc

CVE-2025-14174 PoC Exploit Overview This repository contains a fully functional Proof-of-Concept PoC exploit for CVE-2025-14174 also tracked as EUVD-2025-203113, a critical memory corruption vulnerability in the ANGLE graphics engine. The flaw stems from improper restriction of operations within...

Exploit-Dirty-Cow

Exploit - Dirty Cow CVE-2016-5195 Privilege Escalation Lab | Linux Kernel Exploit 📋 Overview Hands-on lab reproducing the DirtyCow vulnerability CVE-2016-5195, a critical race condition found in the Linux kernel that allows unprivileged users to gain write access to read-only memory mappings,...

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit IPC Local Security Bypass Inter Process Communication through shared memory is a concept where two or more process can access the common memory. And communication is done via this shared memory where changes made by one process can be viewed by another process. The kern...

CVE-2025-5777

CVE-2025-5777 Citrix NetScaler Memory Leak Exploit !WARNING This script is intended for educational and research purposes only. Do not use it against systems without explicit permission. Unauthorized access or testing is illegal and unethical. Read the full DISCLAIMER before using this script...

openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission

A flaw was found in OpenSSL. The Datagram Transport Layer Security DTLS retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to...