slides

slides A collection of slides. 2025 A tale of challenging MTE: Rooting Google Pixel with kernel MTE enabled in one shot Conference: POC 2025 2024 Simple bug but not easy exploit: Rooting Android devices in one shot Conference: Cansecwest 2024 Almost same with POC 2023, except for MTE 2023 Simple...

JNDI-Injection-Exploit

JNDI-Injection-Exploit Materials about JNDI Injection 中文文档 相关文章 Description JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. RMI server and LDAP server are based on marshals and modified further...

CVE-2018-1235

CVE-2018-1235 A python script that tests for an exploitable instance of CVE-2018-1235. NIST: https://nvd.nist.gov/vuln/detail/CVE-2018-1235 Usage: ./CVE-2018-1235.py -t Target Host -r Your IP This code may be altered to actively exploit the vulnerability. Support for network scopes may be added...

CVE-2026-7654

CVE-2026-7654 CVE-2026-7654 Admin Columns PHP Object Injection RCE Exploit...

CVE-2023-23752

Installation git clone https://github.com/0xx01/CVE-2023-23752.git cd CVE-2023-23752 chmod +x exploit.sh Usage ./exploit.sh http://localhost...

CVE-2022-29856-PoC

CVE-2022-29856-PoC Minimal PoC for CVE-2022-29856 Credits: https://dolosgroup.io/blog/2022/4/28/anatomy-of-a-zero-day-how-to-decrypt-a-robot...

cve-2026-1668-poc

Proof-of-concept exploit for CVE-2026-1668 This is a proof-of-concept exploit for CVE-2026-1668. It is intended purely for educational purposes only. Please do not attempt to exploit systems that you do not own or do not have explicit permission to exploit. This proof-of-concept was developed...

CVE-2026-52943

How to use this repo This is a Linux Kernel Local Privilege Escalation PoC code for a use-after-free in skbuff.c : https://github.com/torvalds/linux/commit/98d0912e9f841e5529a5b89a972805f34cb1c69d vidieo1.webm here is the writeup link: https://hackmd.io/@mlc0cVjxSwqv0OoxsUYccw/Bk99YYTyzx you need...

cve-2018-11776-docker

CVE-2018-11776 Docker container and POC exploit written in Go You can build your own image and run it: docker build . -t yourimagename docker container run -it --rm -p 8080:8080 yourimagename Or you just can pull the one I created with love for you: docker container run -it --rm -p 8080:8080...

CVE-2018-1932X

CVE-2018-1932X Rust Exploit POC for GIGABYTE APP Center v1.05.21 and earlier Just because your target is memory unsafe doesn't mean your exploit has to be! Vulnerabilities used : CVE-2018-19320 - ring0 memcpy-like functionality CVE-2018-19323 - read and write Machine Specific Registers MSRs...

CVE-2026-32746-Exploit

This repository does not have a README...

splitting-the-email-atom

Splitting The Email Atom: Exploiting Parsers To Bypass Access Controls Welcome to the repo. This repository contains all the materials for my talk "Splitting The Email Atom:Exploiting Parsers To Bypass Access Controls". You can read about this research at:...

CVE-2021-3345

CVE-2021-3345 How to build vulnerable libgcrypt git clone --single-branch --branch LIBGCRYPT-1.9-BRANCH https://dev.gnupg.org/source/libgcrypt.git cd libgcrypt git checkout aa3f595341eb ./autogen.sh ./configure --enable-maintainer-mode && make How to use exploit make ./main This vulnerability is...

CVE-2021-43857-POC

This repository does not have a README...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Tested support: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64 WinXP x32, Win2003 x32, Win2003 x64 The original exp does not support xp, 2003. This code adds support for these two systems based on...

Centreon-CVE-2015-1560_1561

Centreon-CVE-2015-15601561 A little Python tool for exploiting CVE-2015-1560 and CVE-2015-1561 on Centreon = 2.5.4 Quick'n'dirty. Real dirty...

CVE-2021-4034

CVE-2021-4034 Exploit of the vulnerability CVE-2021-4034 Steps prior to execution: Add a . after the = in the GNCOV... folder...

ExploitPOC_MS15-014_CVE-2015-0009

This repository does not have a README...

CVE-2024-53677-Exploit

CVE-2024-53677 Exploit This repository contains an automated Python exploit script and a JSP web CVE-2024-53677-Exploit...

mtk-su-reverse-cve-2020-0069

mtk-su just some of my notes String table get decompressed string table by using binwalk -Xe stringtabledump dump from address in idb 0x1F098 compressed size: 1260 if you want the idb open an issue with your email and i'll send it. it's a good starting point if you want to re-write the exploit...