cve-2025-21756

Análisis n-day de CVE-2025-21756 Un análisis n-day de CVE-2025-21756 basado en el writeup de Michael Hoefler. Mi exploit difiere del exploit original en el paso de spray y en algunos otros pequeños detalles. Está aquí...

PrintNightmare

PrintNightmare Comprueba si tu máquina posterior al parche sigue siendo vulnerable Orientación sobre cómo implementar una versión no maliciosa y 'desactivada' del exploit. Investigación que analiza el tráfico de red capturado del exploit PrintNightmare Análisis de un PCAP que contiene tráfico...

awesome-list

Awesome Cybersecurity List My personal collection of awesome blog posts, write-ups, and papers focusing on cybersecurity. For a deeper dive into cybersecurity-related tools, check out the dedicated Cybersecurity Tools list. Outline 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2014 2011...

CVE-2021-41081

CVE-2021-41081 INVESTIGACIÓN DE VULNERABILIDADES N-DAY DEL PARCHE AL ANÁLISIS DE EXPLOTACIÓN DE CVE-2021-41081 Para detalles técnicos visite la publicación del blog Análisis Técnico de CVE-2021-41081 Saludos cordiales, Sudu...

heapinspect

HeapInspect Pwnning is an art. HeapInspect is designed to make heap much more prettier. Now this tool is a plugin ofnadbg. Try it! Features Free of gdb and other requirement Multi glibc support 2.19, 2.23-2.27 currently tested both 32bit and 64bit Nice UI to show heap HeapShower detailed...

cve-2018-8174_analysis

Diseccionando un exploit moderno de navegador: caso de estudio de CVE-2018-8174 Resumen Cuando este exploit surgió por primera vez a finales de abril y principios de mayo, despertó mi interés, ya que a pesar de una fuerte ofuscación, la estructura del código parecía bien organizada y el código de...

DirtyPipe-CVE-2022-0847

DirtyPipe-CVE-2022-0847 这个仓库是为了分析和理解DirtyPipe漏洞CVE-2022-0847而开发的，用于我的第三学年第一学期的安全软件系统作业。 我写的论文 论文将在学期结束后可用。...

chocobo

chocobo Chocobo Root（CVE-2016-8655）分析 备注 这是最新的Linux提权漏洞，于2016-12-06发布 见此 http://seclists.org/oss-sec/2016/q4/607。 目前找到的参考资料： http://www.theregister.co.uk/2016/12/07/androiddirtycowkernelpatch/ https://www.exploit-db.com/exploits/40871/ 目标：撰写一份CPI白皮书/博客，内容包括： 对漏洞利用进行更深入的分析。当前...

ConPresentations

ConPresentations Diapositivas, recursos y grabaciones variadas de algunas de mis presentaciones en conferencias. Presentaciones en Conferencias Keynote de BSidesCanberra 2023: "Cuando los exploits no son binarios" Diapositivas OffensiveCon 2023: "El bug de Print Spooler que no fue" con James...

EternalBlue-MS17-010-Vulnerability

EternalBlue MS17-010 Vulnerability Analysis This repository...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

WHS4CVE-20...

ExploitMind

ExploitMind Overview ExploitMind is an en...

KAVACHx

Intelligent Exploit & Patch Management Platform A full-stack...

Exploit for Out-of-bounds Write in Google Chrome

CVE-2025-5419 An uninitialized read vulnerability by incorrec...

Exploit for Cross-site Scripting in Roundcube Webmail

CVE-2024-42008 RoundCube XSS Exploit Overview This reposi...

Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover

Exploit Title: Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover Google Dork: N/A Date: 21/07/2024 Exploit Author: Mohammed Adel Vendor Homepage: https://www.cisco.com Software Link:...

NorthStar C2 Agent 1.0 Cross Site Scripting / Remote Command Execution

Exploit Title: NorthStar C2 agent RCE via stored XSS Date: 2024-03-11 Exploit Author: @chebuya Software Link: https://github.com/EnginDemirbilek/NorthStarC2 Version: v1.0 Tested on: Ubuntu 20.04 LTS CVE: CVE-2024-28741 Description: NorthStar C2 applies insufficient sanitization on agent...

Exploit for Type Confusion in Google Chrome

CVE-2022-4262 Full Analysis including roo...

GCP ESPv2 Hit with Critical API Authorization Bypass CVE-2023-30845

This post delves into a very impactful JWT Authentication Bypass vulnerability CVE-2023-30845 found in ESP-v2, an open-source service proxy that provides API management capabilities using Google Service Infrastructure. This vulnerability allows malicious API clients to bypass JWT authentication...

CVE-2022-4262

creationtimestamp| type| source ---|---|--- 2022-12-05 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=926 2022-12-05 11:10:43+00:00| exploited| https://t.me/truesecator/3783 2022-12-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=927 2022-12-06...