337 matches found
study_embedded_security
studyembeddedsecurity A hands-on study...
exploitarium
Statement This repo was incomplete when published. In regar...
exploitarium
If you wish to collaborate/discuss with me, contact me on discor...
exploitarium-fork
If you wish to collaborate/discuss with me, contact me on discor...
exploitarium
If you wish to collaborate/discuss with me, contact me on discor...
📄 FreeType SHZ 2.14.3 Heap Buffer Overflow
This Python proof of concept framework is designed for security research into a reported heap buffer overflow condition affecting the FreeType TrueType bytecode interpreter. The code constructs specially crafted font structures intended to exercise the SHZ instruction path, generates malformed...
DIG: Oracle-Guided Directed Input Generation for One-Day Vulnerabilities
One-day vulnerabilities pose significant risks due to delayed or incomplete patch adoption. Generating proof-of-concept PoC inputs is therefore essential for assessing real-world impact. The key challenge is identifying necessary constraints for triggering the vulnerability and solving them...
rspwner
RSPWNER RSPWNER is a Rust-based AI-assisted CTF pwn assistant...
Exploit for Improper Authentication in Wordpress
CVE-2008-1930 Exploitation Documentation Guide Document In...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Research Repository !License: MIThttps://i...
Exploit for Use After Free in Arm Avalon_Gpu_Kernel_Driver
CVE-2022-46395 QEMU r36p0 Lab This repository contains a QEMU...
Needles at Scale: LLM-Assisted Target Selection for Windows Vulnerability Research
The attack surface of a modern operating system is a haystack: thousands of signed binaries and millions of functions, almost none relevant to any given vulnerability. A human analyst or an LLM agent must pick the function worth reading before analyzing it. At whole-OS scope, this target selectio...
Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspective
1 Introduction This article provides a technical analysis of how many Windows kernel mode drivers can be interacted with from user mode without the hardware they were developed for. This work was motivated by driver-oriented vulnerability research and the need to evaluate the exploitability of...
Breaking things to keep them safe with Philippe Laulheret
In the latest Humans of Talos, Amy sits down with Senior Vulnerability Researcher Philippe Laulheret to demystify the world of ethical hacking. Philippe shares his unique journey from French engineering school to the front lines of cybersecurity, explaining how his lifelong love for solving puzzl...
security-skills
Security Skills Security Skills is a Hermes Agent skill pack...
Mythos
Mythos Autonomous cybersecurity agent that connects to multip...
security-advisories
Security Advisories Public write-ups and PoCs for CVEs I've d...
ethical-hacking-ctf
🔐 Ethical Hacking CTF Writeup Coventry University — 7072SC...