exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...

RSC_Detector

Detector de Huellas RSC Una extensión de Chrome para detectar huellas de React Server Components RSC y el App Router de Next.js en páginas web. ⚠️ Aviso Importante Esta extensión está diseñada únicamente con fines educativos y de investigación en seguridad. Incluye funcionalidades que podrían...

CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera

🤝 أظهر دعمك - أعط ⭐️ إذا أعجبك المحتوى | شارك على تويتر | تابعني على CVE-2022-0337 تسريب متغيرات بيئة النظام في Google Chrome وMicrosoft Edge وOpera 📝 الوصف يمكن أن يؤدي الاستغلال الناجح لهذه الثغرة إلى تسريب أسرار المستخدم المخزنة داخل متغيرات بيئة النظام. تم العثور على خطأ أمني في إصدار Chromium...

CVE-2014-0160-Chrome-Plugin

Heartbleed chrome plugin DEPRECATED Chrome plugin who will look-up if the current site and all subdomains called are vulnerable to CVE-2014-0160. The vulnerability check is done by an API service who's now dead it wasn't in 2014! May the code can be useful to someone anyway, if someone found a ne...

CVE-2025-55182-Exploit-extension

RSC Fingerprint Detector A Chrome extension for detecting React Server Components RSC and Next.js App Router fingerprints on web pages. ⚠️ Important Notice This extension is intended for educational and security research purposes only. It includes functionality that may be used to test for...

CVE-2025-6558-exp

CVE-2025-6558 - الهروب من صندوق الحماية في ANGLE/GPU لمتصفح Google Chrome...

fortress

One browser engine to rule them all Stealth Chromium engine...

sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

posta

Posta Posta is a tool for researching Cross-document Messaging communication. It allows you to track, explore and exploit postMessage vulnerabilities, and includes features such as replaying messages sent between windows within any attached browser. Prerequisites Google Chrome / Chromium Node.js...

retire.js

Retire.js What you require you must also retire There are a plethora of JavaScript libraries for use on the Web and in Node.JS apps out there. This greatly simplifies development, but we need to stay up-to-date on security fixes. "Using Components with Known Vulnerabilities" is now a part of the...

linkedin-extension-fingerprinting

LinkedIn Chrome Extension Fingerprinting LinkedIn silently probes for 2,953 Chrome extensions on every page load. Background This repository documents every extension LinkedIn checks for and provides tools to identify them. Data The complete list of extensions with names and Chrome Web Store link...

CVE-2021-22555

CVE-2021-22555 This repo hosts TUKRU's Linux Privilege Escalation exploit CVE-2021-22555. It demonstrates gaining root privileges via a vulnerability. Tested on Ubuntu 5.8.0-48-generic and COS 5.4.89+. Use responsibly and ethically. CVE-2021-22555: Linux Privilege Escalation Exploit This reposito...

neo

Neo Convierte cualquier aplicación web en una API. Sin API oficial. Sin automatización del navegador. Neo es una extensión de Chrome que captura pasivamente cada llamada API que realiza tu navegador, aprende los patrones y permite que la IA o tú las reproduzcan directamente. El Problema Los agent...

CryKeX

Properties: Cross-platform Minimalism Simplicity Interactivity Compatibility/Portability Application Independable Process Wrapping Process Injection Dependencies: Unix - should work on any Unix-based OS BASH - the whole script root privileges optional Limitations: AES and RSA keys only Fails most...

sniffly

Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...

CVE-2026-85046

CVE-2026-85046 English | 한국어 설명 Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High 취약점 상세 정보...

Sublist3r

About Sublist3r Sublist3r is a python tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting. Sublist3r enumerates subdomains using many search engines such as Google, Yahoo, Bing,...

CVE-2019-0808

سلسلة استغلال CVE-2019-5786 وCVE-2019-0808 للنسخة المستقرة من Chrome 72.0.3626.119 على نظام Windows 7 معمارية x86. يستخدم هذا الاستغلال عزل المواقع لتنفيذ هجوم القوة العمياء على CVE-2019-5786. الملف host1wrapper/iframe.html هو سكربت الغلاف الذي يحمّل الاستغلال بشكل متكرر داخل iframe. توجد السلسلة...

CyberMeowfia

웹사이트: nebusec.ai · Twitter @nebusecurity · 버그 목록 885+ IonStack 후속 작업, https://github.com/NebuSec/CyberMeowfia/issues/44 참조 최신 연구 IonStack 파트 II : GhostLock, 15년 동안 모든 Linux 배포판에 존재해 온 스택 UAF Linux Kernel 📖 라이트업 · 🐦 Twitter Longinus : 하나의 버그에 두 가지 경계, 단일 취약점으로 Chrome의 Renderer와 V8 샌드박스를 뚫다,...

CVE-2025-2783

CVE-2025-2783 PoC simulado para CVE-2025-2783 — una vulnerabilidad de escape del sandbox en el Mojo IPC de Chrome. Incluye entrega de phishing, fuzzing de memoria, simulación de IPC y registro. Seguro para demostraciones de equipo rojo, ingeniería de detección y uso educativo. Este proyecto simul...