exploits

Exploits My personal exploit collection of n-days, CTFs, 0days, kernels, browsers and lots of cool stuff :D...

jsunpack-n

jsunpack-n jsunpack-n emulates browser functionality when visiting a URL. It's purpose is to detect exploits that target browser and browser plug-in vulnerabilities. It accepts many different types of input: PDF files - samples/sample-pdf.file Packet Captures - samples/sample-http-exploit.pcap HT...

CVE-2026-41044

CVE-2026-41044 Note: Educational Purposes Only From Advisory to RCA in an Afternoon: How AI Collapses N-Day Analysis A short, honest walkthrough of CVE-2026-41044 in Apache ActiveMQ using the exact pre and post patch code. CVE-2026-41044 was disclosed on April 24, 2026. It's a remote code executi...

CVE-2022-30190-follina-Office-MSDT-Fixed

'Follina' MS-MSDT n-day Microsoft Office RCE — Modified Version Based on the project from https://github.com/chvancooten/follina.py, modifications have been made to allow custom specification of the docx template file, making it easier for phishing use in real-world scenarios. After editing your...

xtride

XTRIDE: N-gram-based Practical Type Recovery Introduction We present XTRIDE, an improved n-gram-based cf. STRIDE approach on type recovery for binaries that focuses on practicality: highly optimized throughput and actionable confidence scores allow for deployment in automated pipelines. When...

CVE-2024-50629_50631

CVE-2024-5062950631 Pre-auth RCE N-day exploitation of Synology BeeStation. Detail: https://kiddo-pwn.github.io/blog/2025-11-30/writing-sync-popping-cron https://github.com/user-attachments/assets/8e2ef59c-4f60-4308-8cd4-6d7ce0ba72e1 $ python3 poc.py 192.168.88.248 192.168.88.254 LISTENER listeni...

oregami

Oregami """ What is this register used for? Hmm.. I'll just rename it to veryuniquename, do a textual search, and find all references! Ok.. Waiting for the search to end.. any minute now.. Done! Now I just need to understand which of the search result is relevant to the current usage frame of the...

CVE-2026-16723

CVE-2026-16723 This is N-day patch we releasing by testing our model capabilities...

overkill

Overkill Overkill is an exploit for a patched vulnerability affecting QNAP QTS. Due to the way QNAP discloses vulnerabilities, I'm unsure if this issue has a CVE or not. However, it was likely patched in November 2020 and April 2021. The n-day was "discovered" while doing diff analysis for...

numpy-1.13.1

Travis CI Status --- NumPy is the fundamental package needed for scientific computing with Python. This package contains: a powerful N-dimensional array object sophisticated broadcasting functions tools for integrating C/C++ and Fortran code useful linear algebra, Fourier transform, and random...

CVE-Reverse

Reverse N Days!!! Just to keep track of all the CVE we find & reverse, should have done it way earlier xD...

CVE-2022-2586-LPE

CVE-2022-2586-LPE LPE N-day Exploit for CVE-2022-2586: Linux kernel nftobject UAF gcc exploit.c -o exploit -lmnl -lnftnl -no-pie -lpthread Author: Alejandro Guerrero [email protected] Copyright C 2022 Qualys, Inc...

chrome_v8_ndays

✓| ID| Version| Hash ---|---|---|--- ✓| CVE-2020-6383| 80.0.3987.116| 25c49d2bd6 ✓| CVE-2020-6418| 80.0.3987.122| bdaa7d66a3 ✓| CVE-2020-6507| 83.0.4103.106| 5db4a28ef7 ✓| CVE-2020-16040| 87.0.4280.88| 2781d58503 ✓| CVE-2021-21220| 89.0.4389.128| 09ecd88ef2 ✓| CVE-2021-21224| 90.0.4430.85|...

ksmbd-n-day

README This repo accompanies my research article Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days, in which I develop a POC for n-days from 2023: CVE-2023-52440 and CVE-2023-4130. I provide the kernel .config, a kernel run script, an image build script, and the POC. The...

CVE-2024-36886

N-Day Vulnerability Research Overview This project focuses on N-Day vulnerabilities in the Linux kernel, with an emphasis on understanding their lifecycle, analyzing their impact, and exploring mitigation strategies. N-Day vulnerabilities are publicly disclosed flaws that remain unpatched on many...

n-days

n-days A collection of POCs & writeups for iOS vulnerabilities either discovered by me, binary diffed from In-The-Wild updates or just cool non-public bugs. CVE| Patched In| Link| Reported by me| Exploited ITW| Description ---|---|---|---|---|--- CVE-2021-1757| iOS 14.4| poc - info| ✖️| ✖️| Kernel...

pocs_slides

Sharing my advisory, poc, slides and scripts to IoT / protocol security. You can find me at: Medium: https://medium.com/@cq674350529 Blog: https://cq674350529.github.io/ Mail: [email protected] Twitter: @cq674350529 Slides OffByOne2025: Patch Diffing, You Are My Sword! A Deep Dive into Two...

reverse-SynthID-text

SynthID Watermark Reverse Engineering Overview This directory contains tools for analyzing and removing SynthID watermarks from AI-generated text. The watermark was developed by Google DeepMind and published in Nature 2024. How SynthID Works Watermarking Process 1. N-gram Context : For each token...

nCentralDumpsterDiver

SolarWinds n-Central Dumpster Diver Description / Explanation FIXES/WORKAROUNDS have been released for more information: https://vulners.com/cve/CVE-2020-7984 This application utilizes the nCentral agent dot net libraries to simulate the agent registration and pull the agent/appliance configurati...

mzap

mzap mzap is a Crystal CLI for multi-target ZAP scanning. It dispatches targets across one or more ZAP API hosts, supports optional wait mode, and can export reports. Features Scan commands: spider, ajaxspider, clientspider ZAP 2.16+, ascan, pscan API definition import for openapi, soap, graphql,...