54 matches found
CVE-2020-6514
CVE-2020-6514 The exploit When writing the exploit, I originally altered the SCTP packets sent to the target device by altering the source of WebRTC and recompiling it. This wasn’t practical for attacking closed source applications, so I eventually switched to using Frida to hook the binary of th...
shadow
shadow :: De Mysteriis Dom jemalloc shadow is a jemalloc heap exploitation framework. It has been designed to be agnostic of the target application that uses jemalloc as its heap allocator be it Android's libc, Firefox, FreeBSD's libc, standalone jemalloc, or whatever else. The current version 2....
heappy
🙂 Heappy：一个快乐的堆编辑器 Heappy 是一款基于 gdb/gef 的编辑器，可帮助你在漏洞利用开发过程中处理堆。 该项目应被视为一种教学工具，有助于理解堆在进程生命周期中的演化过程。它的创建是为了简化最常见堆利用技术的学习，并支持你解决与此主题相关的二进制利用 CTF。 主要特性 这是 Heappy 实现的功能： ✅ 获取堆快照并相互比较 ✅ 立即识别堆 bin 的类型和字段 ✅ 通过十进制、十六进制或字符串搜索和编辑堆值 ✅ 借助堆状态的全景视图轻松定位 ✅ 在注释列中记录关于某个单元格的备注 ✅ 享受浅色和深色模式 快速开始 以下说明将帮助你快速安装和运行 Heappy...
how2heap
堆利用教学 本仓库用于学习各种堆利用技术。 我们以 Ubuntu 的 Libc 发行版作为黄金标准。每种技术都已在对应的 Ubuntu 发行版上验证有效。 你可以在基于 Debian 的操作系统上运行 apt source libc6 下载你正在使用的 Libc 源码。你也可以点击 ▶️ 使用 gdb 在浏览器中调试该技术。 我们是在一次黑客聚会上想到这个主意的，并已实现了以下技术： 文件| ▶️| 技术| Glibc 版本| 补丁| 适用的 CTF 挑战题 ---|---|---|---|---|--- firstfit.c| | 演示 glibc malloc 的 first-fit...
cve-2011-3026-firefox
cve-2011-3026-firefox Example of exploiting CVE-2011-3026 on Firefox Linux/x86, from our Black Hat 2012 talk: "Exploiting the jemalloc Memory Allocator: Owning Firefox's Heap" Original slide deck available at: https://www.blackhat.com/html/bh-us-12/bh-us-12-archives.htmlArgyroudis Updated slide...
heapinfo
HeapInfo As pwn lovers, while playing CTF with heap exploitation, we always need a debugger e.g. gdb for tracking memory layout. But we don't really need gdb if we want to see whether the heap layout same as our imagination or not. Hope this small tool helps us exploit easier ;. Why HeapInfo is...
CVE-2018-9411
CVE-2018-9411 Exploit code for CVE-2018-9411 for MediaCasService. Note that this exploit is only provided for educational or defensive purposes; it is not intended for any malicious or offensive use. Full write-up for the vulnerability and the exploit is available on the Zimperium blog. If you ha...
CVE-2026-23479-Redis-UAF-Proof-of-Concept
🔥 CVE-2026-23479 – Redis UAF 概念验证（PoC） RedisunblockClientOnKey 中的释放后使用（UAF）漏洞，可导致远程代码执行 附带 GDB 辅助利用的概念验证（仅限教育/实验室用途） 📖 概述 CVE-2026-23479 是 Redis 7.2.0 至 8.6.2 版本中的一个严重释放后使用（UAF）漏洞。 该漏洞位于 unblockClientOnKey 中，该函数调用了 processCommandAndResetClient，但未检查其返回值。 如果在调用过程中客户端被释放（例如因淘汰机制），调用方将继续操作悬空指针 → 。...
Astra Linux – Vulnerability in Chromium
The use of “after free” in DevTools in Google Chrome before version 111.0.5563.64 allowed a remote attacker who had convinced the user to engage in direct UI interaction to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
CVE-2026-76041
creationtimestamp| type| source ---|---|--- 2026-08-19 04:47:40+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260819 2026-08-24 04:46:31+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260824...
CVE-2026-74968
creationtimestamp| type| source ---|---|--- 2026-08-19 04:46:26+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...
CVE-2026-74949
creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819 2026-08-20 09:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtix3ozgqv22...
CVE-2026-74943
Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
CVE-2026-19147 vulnerabilities
Vulnerabilities for packages: chromium...
binary-exploitation-labs
Binary Exploitation & Reverse Engineering Labs Hands-on labs...
Exploit for Out-of-bounds Write in Gnu Glibc
CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsyslog...
Binary_Exploitation_Material
Binary Exploitation Material Personal collection of binary ex...
binary-exploitation-labs
Binary Exploitation Labs This repository is my long-term pu...
