pown

Pown Pown.js is a security testing and exploitation toolkit built on top of Node.js and NPM. Unlike traditional security tools, notably Metasploits, Pown.js considers frameworks to be an anti-pattern. Therefore, each feature in Pown is in fact a standalone NPM module allowing greater degree of...

CVE-2026-2828-WebGPU-Cross-Origin-Pixel-Stealing-via-Timing

4. CVE-2026-2828 – WebGPU Cross‑Origin Pixel Stealing via Timing Overview A malicious website uses WebGPU compute shader timing to measure rendering time of a cross‑origin iframe, recovering pixel values of sensitive content e.g., banking details. Severity: High Information Disclosure...

ghostsplice

GhostSplice: cross-channel trust fragmentation attack PoC Proof-of-concept code for GhostSplice , an attack from the ASSET Research Group. The full write-up is "The AI refused to steal the secrets. So we handed it a form.". The idea in plain words AI coding assistants like Cursor, VS Code with...

CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

2. CVE-2026-4567 – Post-Quantum KEM Timing Side-Channel Kyber Decapsulation Overview A vulnerable implementation of the Kyber KEM decapsulation leaks secret key bits through timing differences in the ciphertext rejection step, enabling full key recovery. Severity: Critical Private Key Compromise...

CVE-2026-7070-RDP-Clipboard-Hijacking-via-Virtual-Channel-Injection

CVE-2026-7070 – RDP Clipboard Hijacking via Virtual Channel Injection Program Code Python – simulated RDP clipboard rdpserversim.py - Simulated RDP server with trusted virtual channel from http.server import HTTPServer, BaseHTTPRequestHandler import json, threading clipboard = "" Simulate an RDP...

netattack

NETATTACK The netattack.py is a python script that allows you to scan your local area for WiFi Networks and perform deauthentification attacks. The effectiveness and power of this script highly depends on your wireless card. NETATTACK 2 RELEASED https://github.com/chrizator/netattack2/ USAGE EASY...

cve-2019-0708

CVE-2019-0708 This module checks a range of hosts for the CVE-2019-0708 vulnerability by binding the MST120 channel outside of its normal slot and sending DoS packets. I just modified the initial metasploit module for this vuln to produce a denial of service attack...

CVE-2026-8794

CVE-2026-8794 — Username Enumeration via Authentication Timing Side-Channel in PaperCut NG Field| Details ---|--- CVE ID| CVE-2026-8794 Product| PaperCut NG Affected Version| 25.0.11 Build 75758 and earlier CWE| CWE-208 — Observable Timing Discrepancy CVSS Score| 3.7 Low — standalone; escalates...

CVE-2026-42527

Permissive Default ObjectInputFilter — DNS Side-Channel Reproducer CVE-2026-42527 This project demonstrates CVE-2026-42527 in Apache Camel. The default ObjectInputFilter pattern that several Camel components ship for defense-in-depth deserialization filtering — java.;javax.;org.apache.camel.;! —...

CECster

CECSTeR CECSTeR is the Consumer Electronics Control Security Testing Resource - a GUI-based tool to perform security testing against the HDMI CEC Consumer Electronics Control and HEC HDMI Ethernet Channel protocols Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by...

apple-positional-audio-codec-invalid-header

Proof-of-concept for the CoreAudio patch CVE-2025-31200 in iOS 18.4.1. Write-up here https://blog.noahhw.dev/posts/cve-2025-31200/. Update 05/27/2025 I have been able to push this to a controlled if not arbitrary write. The writeup is coming soon. In order to see for yourself though, you'll have ...

lvi-lfb-attack-poc

PoC for the LVI-LFB Control Flow Hijacking attack CVE-2020-0551 This repository holds the sources for the LVI-LFB Control Flow Hijacking attack PoC. Contents lvi-cfh-poc - hijack the control flow of another process via line-fill buffer spraying whitepaper Prerequisites 1. Visual Studio 2015 2. A...

power_analysis

Power analysis attack over RSA Index Index Introduction Power Analysis Attacks RSA: A Short Introduction RSA Example Equipment Measuring Power: A Short Introduction Ohm's Law Kirchhoff's Voltage Law KVL Voltage Divider Shunt Resistor Example Power Measurement Fast Exponentiation Fast Exponentiati...

Erlang-OTP-PoC_CVE-2025-32433

Erlang/OTP SSH Pre-Authentication Channel Confusion 📺 Proof of Concept Video Description: A demonstration of the Erlang/OTP SSH Pre-Authentication Channel Confusion vulnerability. Click here to watch the full demo on YouTube Abstract What is this PoC about? This Proof of Concept demonstrates...

jenkins_scan

jenkinsscan Find Jenkins environment and check for CVE-2024-23897 How it works Jenkins Detection Tests the paths: /, /login, /oops, /api/json, /cli, /jenkins/, /jenkins/api/json Identifies via: 1. Header X-Jenkins — most reliable, also returns the version 2. Header X-Hudson — older instances 3...

CVE-2020-16012-PoC

CVE-2020-16012 | Side Channel Attack This repository contains Proofs of Concept PoCs for CVE-2020-16012 , a side-channel vulnerability identified in the implementation of CanvasRenderingContext2D.drawImage in Firefox and Chromium. This project was conducted as a collaborative effort by a team of...

CVE-2025-52413

CVE-2025-52413 — Particle Device OS BLE Buffer Overflow Discoverer : Golden Ticket Labs Vendor : Particle Date Assigned : August 12th 2025 MITRE Description A buffer overflow in the blecontrolrequestchannel.cpp component of Particle Device OS v5.6.0 enables arbitrary function pointer overwrite du...

CLEANSTART-2026-XR25689 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel

CVE-2026-77696 affects multiple packages. Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. See references for individual vulnerability details...

CLEANSTART-2026-QD52056 Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet

CVE-2026-18798 affects multiple packages. Issue summary: QUIC server may double free QRX QUIC record layer RX object when channel creation fails for initial packet. See references for individual vulnerability details...

CLEANSTART-2026-IL62740 Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without...

CVE-2026-14456 affects multiple packages. Issue summary: When an OpenSSL QUIC server Listener SSL object processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. See references for individual...