CVE-2010-2883

CVE-2010-2883 إثبات المفهوم PoC لـ CVE-2010-2883 باستخدام أبحاث TTD، تقنيات Metasploit، BOF+ROP و HEAP spraying لأغراض تعليمية فقط...

cve-2012-1889

heapspray كيفية تنفيذ رشّ الكومة بدقّة demo عرض توضيحي عملي...

CVE-2024-6387

CVE-2024-6387 CVE-2024-6387 هو مثال افتراضي، لكن لنفترض أنه ثغرة أمنية حقيقية في تطبيق خادم OpenSSH. قد تتضمن هذه الثغرة مشكلة تجاوز سعة المخزن المؤقت أو تلف الذاكرة تسمح للمهاجمين عن بُعد بتنفيذ كود عشوائي على الخادم. إليك شرح عالي المستوى لكيفية استغلال هذه الثغرة: 1. حقن الكومة Heap Spraying:...

MS17-010

MS17-010 هذا المستودع مخصص لنشر أعمالي حول MS17-010. لا توجد لدي أي خطة لتقديم أي دعم. جميع مشكلات الدعم لن تحصل على رد مني. الملفات BUG.txt تفاصيل ثغرة MS17-010 وبعض التحليلات checker.py سكربت للعثور على أنبوب مسمى named pipe قابل للوصول eternalblueexploit7.py إكسبلويت Eternalblue لنظامي ويندوز...

Python-precise-heap-spraying-

Python-precise-heap-spraying- بايثون رش الكومة الدقيق 0c0c0c0c...

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free تنفيذ تعليمات برمجية عن بُعد عبر ثغرة Use-After-Free في JScript.dll CVE-2025-30397 🧠 الوصف يحتوي هذا المستودع على استغلال لإثبات المفهوم PoC لثغرة الاستخدام بعد التحرير Use-After-Free في محرك JScript jscript.dll التي تؤثر على Windows...

Linux-ExploitDev

Linux Kernel Exploitation Notes In progress — notes are a...

Exploit for CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ Heartbleed's...

Classic-Heap-Attacks-POCs-Windows-10

Pruebas de concepto contra el heap de Windows En este reposit...

Exploit for Use of Uninitialized Resource in Microsoft

Proof-of-Concept exploit for the Untrusted Pointer Dereferenc...

Exploit for Use of Uninitialized Resource in Microsoft

Proof-of-Concept exploit for the Untrusted Pointer Dereferenc...

Exploit for Out-of-bounds Write in Adobe Acrobat

CVE-2010-2883 PoC for CVE...

Exploit for Use of Uninitialized Resource in Vmware Fusion

This is a VMware Escape Exploit, a proof-of-concept PoC exploit for CVE-2017-4905, targeting VMware WorkStation 12.5.5 and earlier versions. The exploit is designed to escape the VMware environment and execute arbitrary code on the host system. The exploit is written in C and uses a heap...

AutoBlue-MS17-010

This is a semi-automated, fully working, no-bs, non-metasploit version of the public exploit code for MS17-010. The exploit is designed to target Windows systems vulnerable to the EternalBlue vulnerability, which is a remote code execution RCE vulnerability in the SMBv1 protocol. The exploit code...

Microsoft Windows Server 2025 JScript Engine - Remote Code Execution (RCE)

!/usr/bin/env python3 Exploit Title: Microsoft Windows Server 2025 JScript Engine - Remote Code Execution RCE Exploit Author: Mohammed Idrees Banyamer Instagram: @@banyamersecurity GitHub: https://github.com/mbanyamer Date: 2025-05-31 CVE: CVE-2025-30397 Vendor: Microsoft Affected Versions: Windo...

Exploit for Type Confusion in Microsoft

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Fre...

Exploit for Type Confusion in Google Chrome

Chrome Renderer 1day RCE via Type Confusion in Async Stack Tra...

Experts Detail New RCE Vulnerability Affecting Google Chrome Dev Channel

Details have emerged about a recently patched critical remote code execution vulnerability in the V8 JavaScript and WebAssembly engine used in Google Chrome and Chromium-based browsers. The issue relates to a case of use-after-free in the instruction optimization component, successful exploitatio...

Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass

Posted by Samuel Groß, Project Zero This post is the second in a series about a remote, interactionless iPhone exploit over iMessage.The first blog post, which introduced the exploited vulnerability, can be found here. The initial primitive gained from the vulnerability is an absolute address...

Analyzing an exploit for СVE-2017-11826

The latest Patch Tuesday 17 October brought patches for 62 vulnerabilities, including one that fixed СVE-2017-11826 – a critical zero-day vulnerability used to launch targeted attacks – in all versions of Microsoft Office. The exploit for this vulnerability is an RTF document containing a DOCX...