ExifSmugglingPoC

Contrabando de Exif Una evolución de prueba de concepto del Contrabando de Caché. Este ataque oculta un payload ejecutable dentro de los datos Exif de un JPG. Como resultado, el almacenamiento en caché de imágenes como el de un navegador web puede usarse para descargar pasivamente el payload. Com...

auto-cve-2022-44268.sh

auto-cve-2022-44268 Automatizando la explotación de CVE-2022-44268 ImageMagick Arbitrary File Read Hallazgo original: https://www.metabaseq.com/imagemagick-zero-days/ Repositorio del PoC: https://github.com/duc-nt/CVE-2022-44268-ImageMagick-Arbitrary-File-Read-PoC Descripción ImageMagick...

onionscan

What is OnionScan? OnionScan is a free and open source tool for investigating the Dark Web. For all the amazing technological innovations in the anonymity and privacy space, there is always a constant threat that has no effective technological patch - human error. Whether it is operational securi...

basecrack

BaseCrack Base编码方案解码器 BaseCrack 是一个用 Python 编写的工具，可以解码所有字母数字 Base 编码方案。该工具可以接受单个用户输入、来自文件的多个输入、来自参数的输入、多重编码的 Base 、图像 EXIF 数据中的 Base 、使用 OCR 识别图像上的 Base ，并且解码速度非常快。 基本演示可尝试 Web 界面，它使用了 BaseCrack 的 API。 趣闻! 最初我是在受够了无聊的 CTF 挑战中那些多重编码的 Base 后制作的。现在有些挑战开始将其用于隐写术题目中，所以我干脆也把这个自动化了！ 目录 功能特性 支持的编码方案 安装 使...

exifLooter

Exif Looter 博客文章 » · 报告 Bug · 请求功能 目录 1. 开始入门 安装 2. 使用 分析特定图像 分析特定目录 管道与其他工具 从图像中移除元数据 获取开放街道地图 URL 3. 报告 4. 路线图 5. 贡献 6. 许可证 7. 联系 开始入门 关于在本地设置 Exif Looter 的通用信息 安装 root@kitploit: go install github.com/aydinnyunus/exifLooter@latest ExifLooter 依赖于 exiftool，因此请确保它已在您的 PATH 中。 在 Kali Linux 上...

external_libexif_AOSP10_r33_CVE-2020-0181

libexif ------- DESCRIPCIÓN libexif es una biblioteca para analizar, editar y guardar datos EXIF. Está diseñada para reemplazar muchas implementaciones redundantes en utilidades de línea de comandos y programas con GUI. CARACTERÍSTICAS libexif admite el análisis, edición y guardado de datos EXIF...

Refloow-Geo-Forensics

📍 Refloow™ Geo Forensics 官方 GitHub 仓库 专业开源 OSINT 与数字取证工具 版本 1.4.0（最新）： 版本 1.0.0（发布）： Refloow™ Geo Forensics 是一款高性能的开源数字取证工具，专为调查人员、OSINT 从业者和安全分析师设计。它能从批量图像或视频中自动提取 EXIF 元数据，在交互式地图上可视化地理空间数据，并重建按时间顺序的事件时间线，以揭示数字证据中隐藏的联系。完全私有且本地运行，无数据收集，无需登录。 资源与社交媒体 | 报告问题 / 请求功能 | 其他 Refloow 软件 !IMPORTANT...

CVE-2026-90682

A flaw was found in Matthias-Wandel jhead. This vulnerability, a heap-based buffer overflow, exists within the WebP EXIF Handler component, specifically in the ProcessGpsInfo function. A local attacker could exploit this by manipulating the TAGGPSLAT or TAGGPSLONG arguments. Successful exploitati...

CVE-2026-90681

A flaw was found in Matthias-Wandel jhead. A local attacker could exploit an out-of-bounds read vulnerability in the EXIF Exchangeable Image File Format parsing component, specifically within the Get16u function. This could lead to a denial of service, making the application unavailable. Mitigati...

imago-forensics

imago-forensics 🕵️ Imago 是一个 Python 工具，用于递归地从图像中提取数字证据。 该工具在整个数字取证调查中非常有用。如果你需要提取数字证据并且有大量图像，通过此工具你可以轻松地对它们进行比较。Imago 支持将证据提取到 CSV 文件或 SQLite 数据库中。如果 JPEG 的 EXIF 中包含 GPS 坐标，Imago 可以提取经度和纬度，并将其转换为度数，并检索相关位置信息，如城市、国家、邮政编码等。 Imago 还提供了计算错误级别分析（Error Level Analysis）和检测色情内容的功能，但这些功能目前处于 BETA 阶段。 设置 通过...

imago-forensics

imago-forensics 🕵️ Imago is a python tool that extract digital evidences from images recursively. This tool is useful throughout a digital forensic investigation. If you need to extract digital evidences and you have a lot of images, through this tool you will be able to compare them easily. Imago...

GitLab-preauth-RCE_CVE-2021-22205

GitLab-preauth-RCECVE-2021-22205 PoC de bash en una línea para RCE preautenticado en GitLab CVE-2021-22205 root@kitploit: t="http://vuln.site";cmd='echo xxxbase64ofreverseshellcodexxx |base64 -d|bash';f="1.jpg";echo...

WP_CROP_RCE

WordPress Image CROP RCE Analysis Report POC & Dockerfile : https://github.com/synod2/WPCROPRCE This document covers CVE-2019-8942 and CVE-2019-8943, known as WordPress Image CROP RCE, which are vulnerabilities found in WordPress versions prior to 4.9.9 and 5.0.1. CVE Number| Disclosure Date|...

CVE-2026-90682

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...

CVE-2026-90681

A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used...

EUVD-2026-77198

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...

CVE-2026-90682

A heap-based buffer overflow in the ProcessGpsInfo function of gpsinfo.c (WebP EXIF Handler) affects Matthias-Wandel jhead up to 3.3 . Manipulation of the TAG_GPS_LAT/TAG_GPS_LONG arguments triggers the overflow. The attack vector is local with low privileges required, yielding partial impact on ...

CVE-2026-90682 Matthias-Wandel jhead WebP EXIF gpsinfo.c ProcessGpsInfo heap-based overflow

A security vulnerability has been detected in Matthias-Wandel jhead up to 3.3. This impacts the function ProcessGpsInfo of the file gpsinfo.c of the component WebP EXIF Handler. Such manipulation of the argument TAGGPSLAT/TAGGPSLONG leads to heap-based buffer overflow. An attack has to be...

CVE-2026-90681

An out-of-bounds read vulnerability exists in Matthias-Wandel jhead up to version 3.3 , specifically in the function Get16u within exif.c of the EXIF Parsing component. The flaw is exploitable via local access and results in a low availability impact, rated LOW (CVSS 3.1 base score 3.3; CVSS 4.0 ...

CVE-2026-90681 Matthias-Wandel jhead EXIF Parsing exif.c Get16u out-of-bounds

A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used...