wesng

Windows Exploit Suggester - 次世代版 WES-NG WES-NG は、Windows の systeminfo ユーティリティの出力に基づくツールで、OS が脆弱性を持つ可能性のある脆弱性のリストと、それらの脆弱性に対するエクスプロイトを提供します。Windows XP から Windows 11 までのすべての Windows OS、およびそれに対応する Windows Server がサポートされています。 BITSADMIN ブログでは、WES-NG に関する詳細な記事「ハッカーのためのWindowsセキュリティ更新プログラム」が公開されています。 使用...

bindiff

版权所有 2011-2026 Google LLC。 BinDiff 本仓库包含 BinDiff 的源代码。BinDiff 是一款开源二进制文件比较工具，可快速发现反汇编代码中的差异与相似之处。 目录 关于 BinDiff 快速入门 文档 代码地图 从源码构建 许可协议 参与贡献 关于 BinDiff BinDiff 是一款开源二进制文件比较工具，可帮助漏洞研究人员和工程师快速发现反汇编代码中的差异与相似之处。 借助...

CVE-2020-17035-patch-analysis

CVE-2020-17035-patch-analysis CVE-2020-17035 补丁分析...

AutoPiff

AutoPiff 自动化补丁情报与发现框架 一个用于检测 Windows 内核驱动程序补丁中漏洞修复的语义分析引擎。AutoPiff 使用保守的 YAML 规则，以高精度和可解释性识别安全相关的代码变更。 概述 AutoPiff 分析易受攻击版本与已修补版本之间的差异，自动检测： 释放后使用修复 ExFreePool 后的空值赋值 边界检查添加 memcpy 前的长度校验 用户/内核边界加固 ProbeForRead/ProbeForWrite 整数溢出保护 安全数学辅助函数 状态加固 互锁引用计数 IOCTL 输入校验 、池损坏防护 、权限检查 等 主要特性 高精度...

CVE-2026-32202

PoC python3 CVE-2026-32202.py -h usage: CVE-2026-32202.py -h --unc PATH --out FILE --applet-id INT --name STR --infotip STR --no-dump Generate a test LNK file with an IDCONTROLW structure. Research tool for CVE-2026-21510 / CVE-2026-32202 patch analysis. options: -h, --help show this help message...

diaphora v3.4.2

δiaphora Installation Install with the Hex-Rays plugin manager: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing...

cve-research-agent

CVE Research Agent A CVE research agent built on Claude Code...

DIG: Oracle-Guided Directed Input Generation for One-Day Vulnerabilities

One-day vulnerabilities pose significant risks due to delayed or incomplete patch adoption. Generating proof-of-concept PoC inputs is therefore essential for assessing real-world impact. The key challenge is identifying necessary constraints for triggering the vulnerability and solving them...

Exploit for CVE-2025-12197

Security Research This repository contains my security resea...

From One Vulnerability to Another: Outlook Patch Analysis Reveals Important Flaw in Windows API

...

Exploit for Improper Ownership Management in Debian Debian_Linux

README gcc -Wall exp.c pkg-config fuse --cflags --libs...

Exploit for CVE-2022-30136

CVE-2022-30136 Windows Network File System Remote exploit PoC...

CVE-2022-21907

HTTP Protocol Stack Remote Code Execution Vulnerability...

Exploit for SQL Injection in Zohocorp Manageengine_Network_Configuration_Manager

CVE-2021-41081 N-DAY VULNERABILITY RESEARCH F...

K03009991: iControl REST unauthenticated remote command execution vulnerability CVE-2021-22986

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.0.0.x before 7.0.0.2, the iControl REST interface has an unauthenticated remote command execution vulnerability. Note...

CVE-2020-3956: VMware Cloud Director Code Injection Vulnerability

VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability. An authenticated actor may be able to send malicious traffic to VMware Cloud Director which may lead to...

Microsoft Office - OLE Remote Code Execution Exploit

Exploit for windows platform in category remote exploits Source: https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11882 Research:...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft...

Microsoft Office - OLE Remote Code Execution

Source: https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11882 Research:...

CVE-2017-0283: Windows Uniscribe remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

The last“patch Tuesday”to fix the one named“USP10! MergeLigRecords in Windows Uniscrible font processing heap broken ring”RCE vulnerability. Many days after the Google Project Zero team of Mateusz Jurczyk released a PoC of the report. In the Windows of the library at the same time the presence of...