cfgrip

cfgrip PE/ELF x86/x64 CFG extractor. Takes a binary in, disassembles it, resolves every jump and call GOT, jump tables, register tracing, and exports the full control flow graph as structured JSON. why You need to know exactly where every branch goes. Not for reading — for patching. Feed the JSON...

BasicHook

BasicHook Hooks functions using 32-bit relative jump, writing is done atomically to avoid race conditions. Uses hde32 from instruction length disassembly...

Jump-over-ASLR-BTB

Branch Predictors & ASLR Author: Byte Reaper Description This repository contains research C implementation that demonstrates concepts related to branch predictors, speculative execution, and cache-based side channels in the context of address space layout randomization ASLR. Requirements : Linux...

Byepervisor

Byepervisor Summary PS5 hypervisor exploit for = 2.xx firmware. Two vulnerabilities and exploit chains are contained in the repo, they are independent of each other and either can be used. One exploit is provided mainly just for preservation /oldjumptableexploit, only the primary exploit chain...

zyrox

Zyrox LLVM Obfuscator llvm compile and link-time plugin for obfuscating native code Why why not ¯\ツ/¯ One of my biggest projects, where I learned a lot about LLVM internals, binary formats, assembly and obfuscation techniques. I believe that learning through building is the best way to learn, thu...

CVE-2024-44083

CVE-2024-44083 the original PoC repos got deleted github.com/Azvanzed/CVE-2024-44083, github.com/Azvanzed/IdaMeme so here it is. figured id recreate it for anyone who wants to understand how it works or test their setup. IDA Pro ≤ 8.4 crashes when analyzing binaries with excessive jump chains. th...

CVE-2026-1801C

This repository does not have a README...

CVE-2020-37288 Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops

Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal function called two or more internal calls deep, producing an invalid jump destination stack underflow. Affected contracts revert such calls unnecessarily, which in limited...

CVE-2020-37288

Vyper versions 0.1.0b10 before 0.2.3 are vulnerable to an invalid jump destination caused by a stack underflow . This occurs when a return statement is used inside a for loop within an internal function that is called two or more internal calls deep. The compiler generates incorrect code for thes...

CVE-2020-37288 Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loops

Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal function called two or more internal calls deep, producing an invalid jump destination stack underflow. Affected contracts revert such calls unnecessarily, which in limited...

CVE-2015-8710

Reproducer Kudos to Mike Dalessio, Francois Chagnon, Florian Weingarten and Jun Kokatsu. See BZ 746048 Building on Linux $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2 -DLIBXML2INCLUDEDIR=/path/to/your/sources/libxml2-2.9.1/include/ $ make...

portia

⚠️ NOTE: This tool is no longer under active maintenance. portia Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised Privilege escalation Lateral movement Convenience modules Portia is a genus o...

UBUNTU-CVE-2026-98856

In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking optkprobe overlap On x86, an optkprobe at A replaces five bytes with a jump. If a disabled probe B is at A+2, getoptimizedkprobe stops at B when arming a new probe C at A+4. It leaves A...

CVE-2026-98856

In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking optkprobe overlap On x86, an optkprobe at A replaces five bytes with a jump. If a disabled probe B is at A+2, getoptimizedkprobe stops at B when arming a new probe C at A+4. It leaves A...

SUSE CVE-2026-98856

In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking optkprobe overlap On x86, an optkprobe at A replaces five bytes with a jump. If a disabled probe B is at A+2, getoptimizedkprobe stops at B when arming a new probe C at A+4. It leaves A...

DEBIAN-CVE-2026-98856

In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking optkprobe overlap On x86, an optkprobe at A replaces five bytes with a jump. If a disabled probe B is at A+2, getoptimizedkprobe stops at B when arming a new probe C at A+4. It leaves A...

AZL-108723 CVE-2026-98856 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking optkprobe overlap On x86, an optkprobe at A replaces five bytes with a jump. If a disabled probe B is at A+2, getoptimizedkprobe stops at B when arming a new probe C at A+4. It leaves A...

CVE-2026-98856

In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking optkprobe overlap On x86, an optkprobe at A replaces five bytes with a jump. If a disabled probe B is at A+2, getoptimizedkprobe stops at B when arming a new probe C at A+4. It leaves A...

CVE-2026-98856

The Linux kernel contains a vulnerability in the kprobes subsystem on x86 architectures. When arming a new probe (C) near an existing optkprobe (A), the get_optimized_kprobe() function incorrectly stops at a disarmed probe (B). This allows the INT3 instruction for probe C to overwrite the jump di...

CVE-2026-98856 kprobes: Skip disarmed probes when checking optkprobe overlap

In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking optkprobe overlap On x86, an optkprobe at A replaces five bytes with a jump. If a disabled probe B is at A+2, getoptimizedkprobe stops at B when arming a new probe C at A+4. It leaves A...