73 matches found
slides
slides Hack Different: Pwning iOS 14 with Generation Z Bugz BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong paper recording parody See No Eval: Runtime Dynamic Code Execution in Objective-C RWCTF 2021 Zhi Zhou@CodeColorist Cross-Site Escape: Pwning macOS Safari Sandbox the Unusual W...
how2heap
教育用ヒープ悪用 このリポジトリは、さまざまなヒープ悪用テクニックを学習するためのものです。 Ubuntu の Libc リリースをゴールドスタンダードとして使用しています。各テクニックは、対応する Ubuntu リリースで動作することが検証されています。 Debian ベースのオペレーティングシステムで使用している Libc のソースコードをダウンロードするには、apt source libc6 を実行できます。また、▶️ をクリックすると、gdb を使用してブラウザ内でテクニックをデバッグすることもできます。...
vulnhub-machines-writeups
vulnhub-machines-writeups Collec...
Command-Injection-Lab
No d...
portswigger-labs-writeups
portswigger-labs-writeups Complete writeups for P...
Welcome to the new Project Zero Blog
Posted by Natalie Silvanovich While on Project Zero, we aim for our research to be leading-edge, our blog design was … not so much. We welcome readers to our shiny new blog! For the occasion, we asked members of Project Zero to dust off old blog posts that never quite saw the light of day. And...
EUVD-2018-12104
Malware in sbrugna...
EUVD-2025-5298
Malicious code in bioql PyPI...
low-level-exploits
lowlevelexploit https://www...
A Systematic Approach to Predict the Impact of Cybersecurity Vulnerabilities Using LLMs
Vulnerability databases, such as the National Vulnerability Database NVD, offer detailed descriptions of Common Vulnerabilities and Exposures CVEs, but often lack information on their real-world impact, such as the tactics, techniques, and procedures TTPs that adversaries may use to exploit the...
TEE-reversing
This repository is an offensive tool for learning how to reverse-engineer and achieve trusted code execution on ARM devices. It contains a curated list of public TEE resources, including papers on TEE reversing and security analysis. The repository includes links to various papers and resources o...
Server-Side Template Injection Vulnerabilities and Exploitation Techniques
Research article called Server-Side Template Injection SSTI Vulnerabilities and Exploitation Techniques. The paper provides a structured methodology for detecting and exploiting SSTI vulnerabilities across multiple template engines, along with real-world case studies and mitigation strategies...
Exploit for Stack-based Buffer Overflow in Ivanti Connect_Secure
CVE-2025-0282 Ivanti Connect Secure IFT TLS Stack Overflow pre...
Exploits and vulnerabilities in Q2 2024
Q2 2024 was eventful in terms of new interesting vulnerabilities and exploitation techniques for applications and operating systems. Attacks through vulnerable drivers have become prevalent as a general means of privilege escalation in the operating system. Such attacks are notable in that the...
The Windows Registry Adventure #1: Introduction and research results
Posted by Mateusz Jurczyk, Google Project Zero In the 20-month period between May 2022 and December 2023, I thoroughly audited the Windows Registry in search of local privilege escalation bugs. It all started unexpectedly: I was in the process of developing a coverage-based Windows kernel fuzzer...
Ransomware on the Move: Evolving Exploitation Techniques and the Active Pursuit of Zero-Days
...
Ransomware on the Move: Evolving Exploitation Techniques and the Active Pursuit of Zero-Days
...
Weekly Digest 30 May – 5 June 2022
Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 412 24 1 45 3 13 For a detailed threat digest, download the pdf file here Summary The first week of June 2022 witnessed the discovery of 412 vulnerabilities out of which 2...