89841 matches found
obfuscation_detection
DetecciĆ³n de OfuscaciĆ³n v2.4 Autor: Tim Blazytko Detectar automĆ”ticamente cĆ³digo ofuscado y otras construcciones de cĆ³digo interesantes DescripciĆ³n: Obfuscation Detection es un plugin de Binary Ninja para detectar cĆ³digo ofuscado y construcciones de cĆ³digo interesantes por ejemplo, mĆ”quinas de...
Project-CVE-2026-65351
BROWSER BOMB / RESOURCE EXHAUSTION PAYLOAD An analysis and documentation overview of the stress-testing browser script developed by Xer0TLabs & Persephrak Decentralized Syndicate. WARNING: For educational, research, and authorized testing purposes only. Running this script will immediately freeze...
CVE-2022-37703
Suggested description In Amanda 3.5.1, an information leak vulnerability was found in calcsize SUID binary. The attacker can abuse the vulnerability to know if a directory exist or not anywhere in the fs. The binary will use opendir as root directly without checking the path, letting the attacker...
CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC
ZoneMinder Time-Based SQL Injection CVE-2024-51482 š Vulnerability Overview CVE ID: CVE-2024-51482 Advisory: GHSA-qm8h-3xvf-m7j3 Affected versions: ZoneMinder 1.37. up to and including 1.37.64 Patched version: 1.37.65 š Description This repository contains a high-performance, parallelized...
spamscanner
A spam filter for Node.js, the command line and mail servers. It catches spam, phishing, scams and malware in any language, explains every decision, and can ask a language model about close calls. spamscanner.net Ā· Getting started Ā· Documentation Features A classifier that reads every language...
cve-2021-44228
cve-2021-44228 This is the mid-term assignment archive of the "Vulnerability Analysis Lab" Junior Fall-Winter at Anhui University. The full document is at https://testgames.me/2024/11/10/cve-2021-44228/...
ecapture v2.8.0
eCapture ęč§č Capture SSL/TLS plaintext with eBPFāno MITM proxy or custom CA installation. English Ā· ę±å !IMPORTANT Supports Linux on x8664 kernel 4.18+, aarch64 kernel 5.5+, and LoongArch64 loong64 kernel 6.6+. Android supports x8664 and aarch64 with the existing kernel minimums. Requires root...
external_tcpdump_AOSP10_r33_CVE-2019-15166
tcpdump To report a security issue please send an e-mail to [email protected]. To report bugs and other problems, contribute patches, request a feature, provide generic feedback etc please see the file CONTRIBUTING in the tcpdump source tree root. TCPDUMP 4.x.y Now maintained by "The Tcpdump...
kube-trivy
A Simple and Comprehensive Vulnerability Scanner for Kubernetes Abstract KubeTrivy is a extends trivy for kubernetes. KubeTrivy is a simple and comprehensive vulnerability scanner for Kubernetes. KubeTrivy detects vulnerabilities of OS packages Alpine, RHEL, CentOS, etc. and application...
CVE-2026-36213
CVE-2026-36213 CVE-2026-36213 | Local Privilege Escalation in MEmu Android Emulator 9.2.7.0 via Insecure Service Binary Permissions | Patched in 9.3.2 CVE-2026-36213 ā MEmu Android Emulator 9.2.7.0 LPE Summary A Local Privilege Escalation LPE vulnerability in MEmu Android Emulator 9.2.7.0. The...
wcfproxy
Build You can either compile the tool once and then use the resulting binary or you can run it "like a script" the Go toolchain will compile it on the fly. For development, the latter option is convenient. For productive use, it is recommended to compile it once from the cli directory and use the...
CVE-2021-4034-CTF-writeup
CVE-2021-4034-CTF-writeup This is a CTF pwn challenge that I wrote in C which requires the user to exploit the CVE-2021-4034 vulnerability. Players are given 2 binaries in the challenge directory in this repo. The chal binary implements the CTF challenge and the shelly.so is a helper binary. How ...
webscreenshot
webscreenshot DescripciĆ³n Un script sencillo para capturar pantallas de una lista de sitios web, basado en el script url-to-image de PhantomJS. CaracterĆsticas IntegraciĆ³n del 'renderizado diferido' de url-to-image para recursos AJAX Funciona completamente en sistemas Windows y Linux Soporte de...
CVE-2019-5736
Usage Edit HOST inside payload.c, compile with make. Start nc and run pwn.sh inside the container. Notes This exploit is destructive: it'll overwrite /usr/bin/docker-runc binary on the host with the payload. It'll also overwrite /bin/sh inside the container. Tested only on Debian 9. No attempts...
sfuzz
SFUZZ Start date: Dec, 2021 This is a coverage-guided, emulation based greybox fuzzer that makes use of a custom Just-In-Time compiler to achieve near-native performance. It works by lifting RISC-V elf binaries to an intermediate representation before JIT compiling them to x86 during execution...
PS5-IPV6-Kernel-Exploit
PS5 3.xx / 4.xx Kernel Exploit Summary This repo contains an experimental WebKit ROP implementation of a PS5 kernel exploit based on TheFlow's IPV6 Use-After-Free UAF , which was reported on HackerOne. The exploit strategy is for the most part based on TheFlow's BSD/PS4 PoC with some changes to...
unlicense
Unlicense A Python 3 tool to dynamically unpack executables protected with Themida/WinLicense 2.x and 3.x. Warning: This tool will execute the target executable. Make sure to use this tool in a VM if you're unsure about what the target executable does. Note: You need to use a 32-bit Python...
dirtycaw-projet
Dirty COW - Privilege Escalation CVE-2016-5195 This project demonstrates a privilege escalation using the Dirty COW vulnerability in a virtual machine with Ubuntu Server 16.04.1 and kernel 4.4.0-31-generic. š§ Environment Victim machine : Ubuntu 16.04.1 vulnerable student without privileges Attack...
ghostlock-x200-app
GhostLock X200 App An on-device one-click root App for the vivo X200 , based on the GhostLock CVE-2026-43499 kernel vulnerability: no flashing, no bootloader unlock, no data wipe. Running it grants temporary root , which is lost after reboot; simply reopen the App to root again with one click. Th...
poc-CVE-2024-23897
poc-CVE-2024-23897 CVE-2024-23897: Jenkins Arbitrary File Read Lead to RCE šÆ Affected Products and Versions Product: Jenkins Continuous Integration/Continuous Delivery server Versions: Jenkins 2.441 and earlier, Jenkins LTS 2.426.2 and earlier Fixed in: Jenkins 2.442, Jenkins LTS 2.426.3 š...