1632 matches found
dostackbufferoverflowgood
This is a Windows executable file .exe named "dostackbufferoverflowgood.exe" that is intentionally vulnerable to a stack buffer overflow attack. The file is part of a repository on GitHub, which is a collection of resources for a talk on vulnerability exploitation. The file is a 32-bit executable...
Exploit for Code Injection in Foxcms
Day06 — FoxCMS-style RCE CVE-2025-29306 — Educational lab T...
Exploit for CVE-2010-1240
CVE-2010-1240 PDF Launch Action Research Tool !Pythonhttps...
Exploit for Use After Free in Microsoft
PoC exploit for CVE-2019-0708. The target product/service is Windows Remote Desktop, and the vulnerability class/vector is a remote code execution RCE vulnerability. The probable entry point is the poc.py script, which is typically invoked by running it directly. The expected impact is remote cod...
Phantom-Evasion
This is a Python antivirus evasion tool called Phantom-Evasion. It is free software, licensed under the GNU General Public License GPL version 3. The tool is designed to evade detection by antivirus software and is intended for educational or research purposes only. The tool has several modules,...
ExploitRemotingService
This is a .NET Remoting Service exploit tool. It is a proof-of-concept PoC exploit for a vulnerability in the .NET Remoting Service. The tool is designed to demonstrate the exploitation of this vulnerability, which allows an attacker to execute arbitrary code on a remote system. The tool consists...
Exploit for Path Traversal in Rarlab Winrar
CVE-2025-8088 WinRAR path traversal tool ⚠ This tool is c...
Exploit for Incorrect Authorization in Vercel Next.Js
CVE-2025-29927 Research and Safe Testing Framework This repos...
sudo_inject
Linux Privilege Escalation by injecting process possessing sudo tokens Inject process that have valid sudo token and activate our own sudo token Introduction We all noticed that sometimes sudo doesn't ask us for a password because he remembers us. How does he remember us and how does he identifie...
Exploit for CVE-2015-5736
CVE-2015-57...
Exploit for Path Traversal in Rarlab Winrar
CVE-2025-8088 WinRAR path traversal tool ⚠ This tool is c...
Behind the Mask: Benchmarking Camouflaged Jailbreaks in Large Language Models
Large Language Models LLMs are increasingly vulnerable to a sophisticated form of adversarial prompting known as camouflaged jailbreaking. This method embeds malicious intent within seemingly benign language to evade existing safety mechanisms. Unlike overt attacks, these subtle prompts exploit...
i-Educar 安全漏洞
i-Educar is a free educational software from Portábilis Open Source. A security vulnerability exists in i-Educar version 2.10 and earlier, which stems from a cross-site scripting attack due to incorrect manipulation of the parameter nmtipo in the file /intranet/educartipoensinocad.php...
Exploit for Path Traversal in Rarlab Winrar
CVE-2025-8088 PoC Educational Use Only Details about this C...
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
PoC: Apache Struts2 CVE-2017-5638 Safe Educational Demo...
Top EdTech Apps Delivering AI Skills
“AI isn’t coming, it’s already here. The question is, are you ready?” That’s the brutal reality of a…...
Design and Implementation of a Controlled Ransomware Framework for Educational Purposes Using Flutter Cryptographic APIs on Desktop PCs and Android Devices
This study focuses on the creation and implementation of ransomware for educational purposes that leverages Python's native cryptographic APIs in a controlled environment. Additionally, an Android version of the framework is implemented using Flutter and Dart. For both versions, open-source...
Exploit for Code Injection in Xwiki
CVE-2025-24893 Install bun: bash curl -fsSL https://bun.c...