n00bRAT

n00bRAT v0.7 C'est un petit programme en C qui émule un serveur HTTP minimal pour la prise d'empreintes fingerprinting des scanners de sécurité. Il permet de contrôler la machine via ce faux protocole HTTPv0.1. Ce serveur n00b a été créé comme RAT pendant mes études pour le cours de hacking...

c-jwt-cracker

JWT cracker A multi-threaded JWT brute-force cracker written in C. If you are very lucky or have a huge computing power, this program should find the secret key of a JWT token, allowing you to forge valid tokens. This is for testing purposes only, do not put yourself in trouble : I used the Apple...

SSH-Remote-Code-Execution

SSH リモートコード実行 SSH ゼロデイ | ClumsyLulz & Taylor Christian Newsome 作 概要 このリポジトリには、入力パラメータを受け取り、SSH プロトコルでサーバーに送信するパケットを生成する C プログラムが含まれています。このプログラムは、データを保持するバッファを割り当て、それをファイルに書き込み、system 関数を使用して指定されたホストとポートへの SSH 接続を開始するコマンドライン文字列を構築します。 特定された問題 現在の実装には、いくつかのセキュリティおよび安定性の問題が存在します： 1. バッファオーバーフロー :...

deobf-Arxan-Deob-C

Arxan-Deob-C Arxan으로 보호된 Windows 실행 파일을 빠르게 난독 해제하는 간단한 C 프로그램입니다. 지금은 좀 지저분합니다... 주의하세요 : 정리할 예정입니다...

SNP-Assignment

SNP-Assignment Exploit d'élévation de privilèges CVE-2017-1000112 L'élévation de privilèges étant une étape clé du point de vue d'un attaquant, j'ai tenté de faire quelques recherches sur l'élévation de privilèges locale, qui est la base de l'ensemble du module d'élévation de privilèges. En lisan...

CVE-2025-41244

💻 Processus technique pas à pas Compiler le programme bash Compilez le code C en un exécutable gcc -o /tmp/httpd /tmp/CVE-2025-41244.c Rendez-le exécutable chmod +x /tmp/httpd Tester la fonctionnalité de version bash Testez l'option -v devrait afficher la version et quitter /tmp/httpd -v Testez...

CISB-Bench: An Auditable Source--IR Dataset of Compiler-Introduced Security Bugs

Compiler-introduced security bugs CISBs arise when an optimization, lowering, or instrumentation decision changes a security-relevant property of the generated program. They are difficult to study because their evidence is distributed across issue reports, reduced tests, historical configurations...

CTF-hw0-BufferOverflow

!Review Assignment Due Datehttps://classroom.github.com/asse...

CVE-2026-40468

Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below...

Packed Bitmap Validation Utility for Detecting Pitch Mismatches and Memory-Safety Risks

This C program implements a lightweight validation utility for identifying structural inconsistencies in packed bitmap formats by analyzing relationships between image width, pitch, and bits-per-pixel representations...

CVE-2026-12602: Incorrect Default Permissions

Incorrect default permissions in ArubaSign, affecting versions prior to v4.6.6. The vulnerability is caused by the assignment of inappropriate permissions during the software’s default installation, whereby the main executable and other programme files located in C:\Program Files have excessive...

ACPM Multithreaded Minimal Transfer Stress Tester

This C program is a lightweight multi-threaded stress test designed to evaluate concurrent behavior of the acpmdoxfer interface under repeated small-size transfer operations across multiple threads sharing the same ACPM handle...

CVE-2020-37101: Unquoted Search Path or Element

VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inject malicious executables into the service binary path. Attackers can exploit the unquoted path in 'C:\Program Files x86\VPN Unlimited' to replace the service executable and gain elevated system...

CVE-2020-36976: Unquoted Search Path or Element

Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code. Attackers can exploit the unquoted path in C:\Program Files x86\Acer\Registration\ to inject malicious executables...

CVE-2021-47825: Unquoted Search Path or Element

Acer Updater Service 1.2.3500.0 contains an unquoted service path vulnerability that allows local users to execute code with elevated system privileges. Attackers can exploit the unquoted path in C:\Program Files\Acer\Acer Updater\ to inject malicious executables that will run with LocalSystem...

CVE-2023-54336: Unquoted Search Path or Element

Mediconta 3.7.27 contains an unquoted service path vulnerability in the servermedicontservice that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\medicont3\ to inject malicious code that would execute with...

Cross Platform Webkit File Dropper

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cross Platform Webkit File Dropper', 'Description' = %q This module exploits a XSLT vulnerability in Webkit to drop ASCII or UTF-8 files to the...

CVE-2024-27518: Improper Privilege Management

An issue in SUPERAntiSyware Professional X 10.0.1262 and 10.0.1264 allows unprivileged attackers to escalate privileges via a restore of a crafted DLL file into the C:\Program Files\SUPERAntiSpyware folder...

CVE-2024-26614

In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the acceptqueue's spinlocks once When I run syz's reproduction C program locally, it causes the following issue: pvqspinlock: lock 0xffff9d181cd5c660 has corrupted value 0x0! WARNING: CPU: 19 PID: 21160 at...

Spoofing

In the Linux kernel, the following vulnerability has been resolved: tcp: make sure init the acceptqueue's spinlocks once When I run syz's reproduction C program locally, it causes the following issue: pvqspinlock: lock 0xffff9d181cd5c660 has corrupted value 0x0! WARNING: CPU: 19 PID: 21160 at...