41 matches found
cve-2018-8174_analysis
Dissezionare un exploit moderno per browser: caso di studio di CVE-2018-8174 Panoramica Quando questo exploit è emerso per la prima volta tra aprile e maggio, ha suscitato il mio interesse, poiché nonostante la forte offuscazione, la struttura del codice sembrava ben organizzata e il codice di...
DirtyPipe-CVE-2022-0847
DirtyPipe-CVE-2022-0847 Questa repository è sviluppata per analizzare e comprendere l'exploit DirtyPipe CVE-2022-0847 per il mio assignment di sistemi software sicuri del 3° anno, 1° anno. Paper che ho scritto il paper sarà disponibile dopo la fine del mio semestre...
CVE-2021-41081
CVE-2021-41081 N-DAY 漏洞研究（从补丁到利用分析：CVE-2021-41081） 技术详情请访问博客文章 CVE-2021-41081 技术分析 此致， Sudu...
PrintNightmare
PrintNightmare जाँचें कि पैच के बाद आपकी मशीन अभी भी असुरक्षित है या नहीं एक गैर-दुर्भावनापूर्ण, 'defanged' संस्करण को लागू करने का मार्गदर्शन। PrintNightmare एक्सप्लॉइट के कैप्चर किए गए नेटवर्क ट्रैफिक का विश्लेषण करने वाला शोध लेख PrintNightmare से दुर्भावनापूर्ण ट्रैफिक वाले PCAP का विश्लेषण।...
ConPresentations
ConPresentations Varie diapositive, risorse e registrazioni di alcune delle mie presentazioni a conferenze. Presentazioni a conferenze Keynote BSidesCanberra 2023: "Quando gli exploit non sono binari" Diapositive OffensiveCon 2023: "Il bug di Print Spooler che non lo era" con James Forshaw...
cve-2025-21756
CVE-2025-21756 N-Day-Analyse Eine N-Day-Analyse von CVE-2025-21756 basierend auf Michael Hoeflers Write-up. Mein Exploit unterscheidet sich vom ursprünglichen Exploit im Spray-Schritt und in einigen anderen kleinen Punkten. Er ist hier...
chocobo
chocobo Análise do Chocobo Root CVE-2016-8655 Notas Esta é a mais recente escalada de privilégios para Linux, lançada em 2016-12-06 aqui http://seclists.org/oss-sec/2016/q4/607. Referências encontradas até o momento: http://www.theregister.co.uk/2016/12/07/androiddirtycowkernelpatch/...
heapinspect
HeapInspect Pwnning is an art. HeapInspect is designed to make heap much more prettier. Now this tool is a plugin ofnadbg. Try it! Features Free of gdb and other requirement Multi glibc support 2.19, 2.23-2.27 currently tested both 32bit and 64bit Nice UI to show heap HeapShower detailed...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
WHS4CVE-20...
ExploitMind
ExploitMind Overview ExploitMind is an en...
KAVACHx
Intelligent Exploit & Patch Management Platform A full-stack...
Exploit for Out-of-bounds Write in Google Chrome
CVE-2025-5419 An uninitialized read vulnerability by incorrec...
Exploit for Cross-site Scripting in Roundcube Webmail
CVE-2024-42008 RoundCube XSS Exploit Overview This reposi...
Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover
Exploit Title: Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover Google Dork: N/A Date: 21/07/2024 Exploit Author: Mohammed Adel Vendor Homepage: https://www.cisco.com Software Link:...
NorthStar C2 Agent 1.0 Cross Site Scripting / Remote Command Execution
Exploit Title: NorthStar C2 agent RCE via stored XSS Date: 2024-03-11 Exploit Author: @chebuya Software Link: https://github.com/EnginDemirbilek/NorthStarC2 Version: v1.0 Tested on: Ubuntu 20.04 LTS CVE: CVE-2024-28741 Description: NorthStar C2 applies insufficient sanitization on agent...
Exploit for Type Confusion in Google Chrome
CVE-2022-4262 Full Analysis including roo...
GCP ESPv2 Hit with Critical API Authorization Bypass CVE-2023-30845
This post delves into a very impactful JWT Authentication Bypass vulnerability CVE-2023-30845 found in ESP-v2, an open-source service proxy that provides API management capabilities using Google Service Infrastructure. This vulnerability allows malicious API clients to bypass JWT authentication...
CVE-2022-4262
creationtimestamp| type| source ---|---|--- 2022-12-05 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=926 2022-12-05 11:10:43+00:00| exploited| https://t.me/truesecator/3783 2022-12-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=927 2022-12-06...
CVE-2022-3038
creationtimestamp| type| source ---|---|--- 2022-09-26 20:23:01+00:00| seen| https://t.me/cibsecurity/50511 2023-03-30 18:17:31+00:00| seen| https://t.me/truesecator/4237 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-09-19 16:01:00+00:00| seen|...