41 matches found
cve-2018-8174_analysis
Diseccionando un exploit moderno de navegador: caso de estudio de CVE-2018-8174 Resumen Cuando este exploit surgió por primera vez a finales de abril y principios de mayo, despertó mi interés, ya que a pesar de una fuerte ofuscación, la estructura del código parecía bien organizada y el código de...
DirtyPipe-CVE-2022-0847
DirtyPipe-CVE-2022-0847 这个仓库是为了分析和理解DirtyPipe漏洞CVE-2022-0847而开发的，用于我的第三学年第一学期的安全软件系统作业。 我写的论文 论文将在学期结束后可用。...
PrintNightmare
PrintNightmare Comprueba si tu máquina posterior al parche sigue siendo vulnerable Orientación sobre cómo implementar una versión no maliciosa y 'desactivada' del exploit. Investigación que analiza el tráfico de red capturado del exploit PrintNightmare Análisis de un PCAP que contiene tráfico...
ConPresentations
ConPresentations Diapositivas, recursos y grabaciones variadas de algunas de mis presentaciones en conferencias. Presentaciones en Conferencias Keynote de BSidesCanberra 2023: "Cuando los exploits no son binarios" Diapositivas OffensiveCon 2023: "El bug de Print Spooler que no fue" con James...
cve-2025-21756
CVE-2025-21756 N-Day-Analyse Eine N-Day-Analyse von CVE-2025-21756 basierend auf Michael Hoeflers Write-up. Mein Exploit unterscheidet sich vom ursprünglichen Exploit im Spray-Schritt und in einigen anderen kleinen Punkten. Er ist hier...
CVE-2021-41081
CVE-2021-41081 N-DAY-SCHWACHSTELLENFORSCHUNG VOM PATCH ZUR EXPLOIT-ANALYSE VON CVE-2021-41081 Technische Details finden Sie im Blogbeitrag Technische Analyse von CVE-2021-41081 Mit freundlichen Grüßen, Sudu...
chocobo
chocobo Análise do Chocobo Root CVE-2016-8655 Notas Esta é a mais recente escalada de privilégios para Linux, lançada em 2016-12-06 aqui http://seclists.org/oss-sec/2016/q4/607. Referências encontradas até o momento: http://www.theregister.co.uk/2016/12/07/androiddirtycowkernelpatch/...
heapinspect
HeapInspect Pwnning is an art. HeapInspect is designed to make heap much more prettier. Now this tool is a plugin ofnadbg. Try it! Features Free of gdb and other requirement Multi glibc support 2.19, 2.23-2.27 currently tested both 32bit and 64bit Nice UI to show heap HeapShower detailed...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
WHS4CVE-20...
ExploitMind
ExploitMind Overview ExploitMind is an en...
KAVACHx
Intelligent Exploit & Patch Management Platform A full-stack...
Exploit for Out-of-bounds Write in Google Chrome
CVE-2025-5419 An uninitialized read vulnerability by incorrec...
Exploit for Cross-site Scripting in Roundcube Webmail
CVE-2024-42008 RoundCube XSS Exploit Overview This reposi...
Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover
Exploit Title: Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover Google Dork: N/A Date: 21/07/2024 Exploit Author: Mohammed Adel Vendor Homepage: https://www.cisco.com Software Link:...
NorthStar C2 Agent 1.0 Cross Site Scripting / Remote Command Execution
Exploit Title: NorthStar C2 agent RCE via stored XSS Date: 2024-03-11 Exploit Author: @chebuya Software Link: https://github.com/EnginDemirbilek/NorthStarC2 Version: v1.0 Tested on: Ubuntu 20.04 LTS CVE: CVE-2024-28741 Description: NorthStar C2 applies insufficient sanitization on agent...
Exploit for Type Confusion in Google Chrome
CVE-2022-4262 Full Analysis including roo...
GCP ESPv2 Hit with Critical API Authorization Bypass CVE-2023-30845
This post delves into a very impactful JWT Authentication Bypass vulnerability CVE-2023-30845 found in ESP-v2, an open-source service proxy that provides API management capabilities using Google Service Infrastructure. This vulnerability allows malicious API clients to bypass JWT authentication...
CVE-2022-4262
creationtimestamp| type| source ---|---|--- 2022-12-05 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=926 2022-12-05 11:10:43+00:00| exploited| https://t.me/truesecator/3783 2022-12-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=927 2022-12-06...
CVE-2022-3038
creationtimestamp| type| source ---|---|--- 2022-09-26 20:23:01+00:00| seen| https://t.me/cibsecurity/50511 2023-03-30 18:17:31+00:00| seen| https://t.me/truesecator/4237 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-09-19 16:01:00+00:00| seen|...