claude-code-devcontainer

Claude Code in a devcontainer A sandboxed development environment for running Claude Code with bypassPermissions safely enabled. Built at Trail of Bits for security audit workflows. Why Use This? Running Claude with bypassPermissions on your host machine is risky—it can execute any command withou...

BC-WHY-NOT-LEARN-NEW-STUFF-

BC-WHY-NOT-LEARN-NEW-STUFF- HACKEANDO SIP/PJSIP bloquea instancias remotas de Asterisk : https://github.com/asterisk/asterisk/security/advisories/GHSA-v428-g3cw-7hv9...

bunch-of-fuzzers-developed-using-libfuzzer-and-asan

bunch-of-fuzzers-developed-using-libfuzzer-and-asan...

exploits

exploits CVE-2021-22600: Exploit de escalada local de privilegios en el kernel de Linux CVE-2021-3156: Escalada local de privilegios en Linux mediante desbordamiento de montón en sudo Demo CVE-2021-3156: Exploit de un solo disparo para la vulnerabilidad de desbordamiento de montón en sudo...

CVE-2019-0708-POC

CVE-2019-0708-POC cve-2019-0708 poc . Run Test Work well for winxp sp3. Need test for win 7. Runtime: win10 x64 python3 PS D:\workspace\python\sqlstruct\sqlstruct\sqlstruct python3 .\poc.py -t 192.168.1.112 -p 3389 CVE-2019-0708 Remote Detection tool by: closethe + Connecting to RDP server. +...

IOCs

////////////////////// // //////////////////////// // /// /////// ///// /////// /////// /////// /////// //////// //////// //////// //////// //////// //////// //////// //////// //////// //////// /////// /////// /////// /////// ///// // ////// // // ///////////////////////// ///////////////////////...

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP Vulnerabilidad de lectura arbitraria del kernel + EOP de Superfetch basado en reacher de https://starlabs.sg/blog/2022/06-trying-to-exploit-a-windows-kernel-arbitrary-read-vulnerability/ . El exploit debe ejecutarse desde integridad baja...

testing-handbook

Trail of Bits Testing Handbook The Trail of Bits Testing Handbook is a resource for developers and security professionals on configuring, optimizing, and automating many static and dynamic analysis tools we use at Trail of Bits. Preview Testing Handbook: https://appsec.guide 🌐 Why is this needed?...

Iot_Hacking_Camera_0day

IotHackingCamera0day Cámara IoT 0day AHD DVR ADN-448 es propenso a un desbordamiento de búfer sin autenticación a través de la interfaz http. Simplemente accede a la interfaz del servidor web e introduce una cantidad absurda de datos en el nombre de usuario y la contraseña, y observa cómo la cáma...

CVE-2026-26903-PoC

CVE-2026-26903 PoC Denegación de servicio mediante recursión ilimitada en la funciónreplaceEqualDeep de TanStack Query Una única actualización de consulta manipulada con objetos profundamente anidados puede congelar el hilo de JavaScript indefinidamente , provocando que la aplicación quede...

CVE-2019-0230

CVE-2019-0230 CVE-2019-0230 Exploit y POC...

glibc: glibc: Process abort due to invalid memory in wordexp

A flaw was found in glibc GNU C Library. A local attacker or application using the wordexp function with the WRDEAPPEND flag can trigger the interface to return invalid memory in the wewordv member. This invalid memory, when subsequently processed by wordfree, may cause the process to abort,...

glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

A flaw was found in glibc. When processing paths that start with a tilde followed by a username, the wordexp function can be forced to allocate an excessive amount of memory on the program's stack. A remote attacker could exploit this by providing a very long username, leading to a stack exhausti...

Moderate: Red Hat Security Advisory: glibc security, bug fix, and enhancement update

An update for glibc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

glibc: Fix out-of-bounds array write in tdelete

A flaw was found in glibc. An out-of-bounds array write vulnerability exists within the tdelete function. This issue occurs due to incorrect management of array sizes, which can lead to memory corruption. A local attacker with low privileges could potentially exploit this to cause a denial of...

NtCreateFile-DoS-Windows-POC

Este repositorio no tiene un README...

Poc

exploit para baseband qualcomm...

GPT_Vuln-analyzer

GPTVuln-analyzer GVA GVA es un conjunto de herramientas de reconocimiento y análisis de vulnerabilidades asistido por IA. Ejecuta el escaneo nmap, DNS, subdominios, JWT, PCAP, GeoIP y luego entrega la salida sin procesar a un modelo de lenguaje grande que devuelve un análisis estructurado orienta...

CVE-2024-27804

CVE-2024-27804 ./build.sh ./panic.sh paniccpu 4 caller 0xfffffe0026851cdc: Unaligned kernel data abort. at pc 0xfffffe0026aed514, lr 0xfffffe0026aed5d8 saved state: 0xfffffe3a396e3200 x0: 0x000000000000000e x1: 0xfffffe1002bdc01b x2: 0x0000000000000000 x3: 0xfffffe3a396e3444 x4: 0xfffffe3a396e344...

RowHammer-Exploit

RowHammer-Exploit Exploit basado en RowHammer backdoor de syssuid usando rowhammer Todavía necesita trabajo... averiguar por qué las cosas no funcionan correctamente... Current stage... Denial fails with the following stack trace... UG: unable to handle kernel paging request at 0000000100000000 P...