instrumentation_callbacks

instrumentationcallbacks Instrumentation callbacks are quite a fun undocumented part of Windows. All the code in this repository is released under the MIT license. This repository uses google style C++ spacing. PRs are welcome if you find issues, bugs, or believe a specific feature should be adde...

VectoredOverloading

VectoredOverloading Vectored Overloading is a local PE injection technique that was first observed in the KidKadi malware. It works by manipulating the load of a legitimate DLL using Hardware Breakpoints HWBP and Vectored Exception Handling VEH to change the DLL section object on-the-fly...

ShellGhost

ShellGhost A memory-based evasion technique which makes shellcode invisible from process start to end. Motivation I wanted to share this shellcode self-injection POC to showcase some AV/EDR evasion concepts that may turn useful for Red Teaming. Just a few weeks ago I came up with a custom in-memo...

moonwalk

moonwalk: DLL Base Address Finder This Rust library and CLI tool demonstrates an alternative method to find the base address of loaded DLLs without using a Process Environment Block PEB walk. This technique is particularly useful in scenarios where PEB walking might be detected or blocked. Branch...

TamperingSyscalls

TamperingSyscalls TamperingSyscalls is a 2 part novel project consisting of argument spoofing and syscall retrival which both abuse EH in order to subvert EDRs. This project consists of both of these projects in order to provide an alternative solution to direct syscalls. Tampering with syscalls...

ROS-20261111-73-0059

The vulnerability in zabbix7-lts is related to an error in exception handling. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20261111-73-0058

The vulnerability in zabbix-lts is related to an error in exception handling. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

ROS-20261111-73-0057

A vulnerability in zabbix7.4 related to improper exception handling. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Vectored-Exception-Handling-Squared

Vectored Exception Handling Squared A Rust Proof of Concept. Read more on my blog, all original research by CrowdStrike, this is just the POC for it! Unless I am blind; there does not seem to be much out there POC's etc relating to the discovery made by CrowdStrike researchers, called Vectored...

CVE-2017-5638

CVE-2017-5638 | Struts s2-045 Description It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value isn't valid an exception is thrown which is then used to display an error message to a user. Affected versions Struts 2.3.5 Struts 2.3.31 Struts 2.5 Stru...

CVE-2024-52316

🚨🚨CVE-2024-52316🚨🚨 🚨🚨CVE-2024-52316 - Apache Tomcat Authentication Bypass Vulnerability Overview CVE202452316 is an authentication bypass vulnerability identified in Apache Tomcat. This issue arises when Tomcat is configured with a custom Jakarta Authentication formerly JASPIC ServerAuthContext...

Apache-Dubbo-Hessian2-CVE-2021-43297

Deserialization during Apache Dubbo Hessian2 Exception Handling CVE-2021-43297 1. Import the two projects into two separate IDEA instances 2. First run org.apache.dubbo.samples.basic.BasicProvidermain to start the server 3. Then run org.apache.dubbo.samples.basic.BasicConsumermain to start the...

struts2_cve-2017-5638

struts2cve-2017-5638 This is a sort of Java porting of the Python exploit at: https://www.exploit-db.com/exploits/41570/. This software is written to have no external dependencies. DISCLAIMER This tool is intended for security engineers and appsec guys for security assessments. Please use this to...

xmlrpc-bruteforcer

An XMLRPC BruteForcer for Wordpress - Inpired by 1N3@CrowdShield Note - This project is discontinued Usage python3 xmlrcpbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt username python3 xmlrpcbruteforce.py http://wordpress.org/xmlrpc.php passwords.txt userlist.txt in progess Target is...

CVE-2026-100300

A flaw was found in Apache ZooKeeper. An unauthenticated remote attacker can exploit improper handling of exceptions in the quota subsystem by writing to the default world-writable quota directory. This action crashes the primary request-processing thread and renders the on-disk data unbootable,...

Improper Kyverno exception handling vulnerability

Versions prior to Kyverno 1.19.2 contain a vulnerability related to improper exception handling. This flaw stems from a type assertion failure within buildStatementMap, which may allow unauthenticated attackers to cause the policy engine to crash by using specially crafted proof statements, or to...

Improper Kyverno exception handling vulnerability

Versions prior to Kyverno 1.19.2 contain an improper exception handling vulnerability. This flaw stems from a lack of type-checking in the variable substitution engine; users who submit resources can exploit it by replacing non-string fields referenced by - variable with a shallowly substituted...

Improper handling of exceptions in tsParticles

Versions of tsParticles prior to 4.3.1 and @tsParticles/mcp-server prior to 4.3.1 contain an improper exception handling vulnerability. This vulnerability arises because, in the HTTP mode of @tsParticles/mcp-server, JSON.parse is invoked outside the request’s local error boundary within the POST...

Improper FreeRDP exception handling vulnerability

FreeRDP versions 3.0.0 through 3.32.2 contain an improper exception handling vulnerability. This vulnerability arises because when parsing input from the server-side RDP peer, the slow path input event containing a six-byte payload is skipped; however, no check is performed to verify whether this...

Improper Google Chrome exception handling vulnerability

Google Chrome versions prior to 157.0.8103.38 contain a vulnerability related to improper exception handling. This flaw stems from inadequate state validation within FileSystem and may allow remote attackers to exploit social engineering tactics via specially crafted HTML pages to bypass system...