LOLBins

LOLBins PyQT app to list all Living Off The Land Binaries and Scripts for Windows from LOLBAS and Unix binaries that can be used to bypass local security restrictions in misconfigured systems from GTFOBins. Widnows Linux...

ophcrack

OPHCRACK 3.6.0 Time-Memory-Trade-Off-Crack A windows password cracker based on the faster time-memory trade-off using rainbow tables. This is an evolution of the original ophcrack 1.0 developed at EPFL http://lasecwww.epfl.ch/oechslin/projects/ophcrack Ophrack 3.6.0 comes with a Qt Graphical User...

QuasarNix

QuasarNix: Adversarially Robust Living-off-the-Land Reverse-Shell Detection Dmitrijs Trizna · Luca Demetrio · Battista Biggio · Fabio Roli Overview Linux living-off-the-land LOTL reverse shells abuse legitimate binaries bash, python, nc, … to establish covert outbound connections, making...

tomcat: Apache Tomcat: Access control bypass due to off-by-one error in RewriteValve [N] flag processing

A flaw was found in Apache Tomcat. An off-by-one error in the RewriteValve's N flag processing causes rewrite rules to restart at the second rule instead of the first. This vulnerability may allow an attacker to bypass intended access controls...

Malicious code in @axo_cuy/baileys (npm)

Source: amazon-inspector 0b32f937714cfd8023a0123f7e15dbeb6a2146fd7f3a22f9cb5ff6728b9d3f48 package.json declares a hard dependency libsignal with the source github:tenka-san/libsignal-node. This is an off-registry dependency source: npm install resolves it to the current HEAD of that third-party...

MAL-2026-18440 Malicious code in @axo_cuy/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b32f937714cfd8023a0123f7e15dbeb6a2146fd7f3a22f9cb5ff6728b9d3f48 package.json declares a hard dependency libsignal with the source github:tenka-san/libsignal-node. This is an off-registry dependency source: npm...

CVE-2026-8389

CVE-2026-8389 This vulnerability was intended to be used at Pwn2Own 2026 Berlin, but was patched in version 150.0.3. SpiderMonkey BaselineJIT pcOffset bitfield truncation on the eager off-thread baseline-compile path, leading to a wrong-but-in-bounds bytecode pc during exception unwinding and a...

OBO

OB1 Off-By-One Slides from OB1 Conferences Watch all the talks Year ↓| Slides| Youtube playlist ---|---|--- 2024| Slides for Day 1| Day 1 - OB1 2024 Online Presentations 2024| Slides for Day 2| Day 2 - OB1 2024 Online Presentations 2025| Slides for Day 1| Day 1 - OB1 2025 Online Presentations 202...

zipdefrag

This Dump Is A Puzzle or Advanced Shotgun Parsing for Fools and Rebels il était une fois Once upon a time, dear reader, on a dark and stormy night, your faithful author stumbled upon a perplexing and mysterious situation - a system where the only thing preventing chip off memory analysis and...

CVE-2006-3747

Files about my bugtraq publication and first working exploit for CVE-2006-3747 Apache modrewrite LDAP off-by-one buffer overflow. http://www.securityfocus.com/archive/1/443870 Public release date of POC/Exploit: 2006-08-20 Author: Jacobo Avariento Gimeno CVE id: CVE-2006-3747 Bugtraq id: 19204 CE...

PUB-A-511811210

In extmemobjgetpage of memss-mfw.c, there is a possible way to return an out of bounds physical address via an off-by-one check due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitatio...

PUB-A-511811378

In tipcdevprobe of tipcvirtiodev.c, there is a possible way to corrupt memory via an off-by-one cleanup loop on probe failure due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Android-Forensics-References

Android Forensics References Last update: September 22th 2025 USERDATA Partition "/log" folder /log/wifi/iwc/iwcdump.txt Cellebrite CTF 2023 Recap: Answers on Sharon’s Android https://cellebrite.com/en/cellebrite-ctf-2023-recap-sharons-android/ /log/netstats /log/batterystats Cellebrite CTF 2021 ...

challack

Proof-of-concept code for CVE-2016-5696 This code currently allows reseting connections or injecting into sessions. The attack is implemented against both clients and servers. For detailed information, consult the original publication: Off-Path TCP Exploits: Global Rate Limit Considered Dangerous...

faraday-client

================ This is deprecated please use Faraday-Cli instead!!! v1.1.0 was a hand-off release, updating only accessing Faraday using API v3 v2 will be deprecated too. ================== Faraday GTK Client .. image:: https://img.shields.io/pypi/v/faradayclient.svg :target:...

cve-2010-1938

🚀 CVE-2010-1938 FTP Off-by-One Exploit A simple Python script to test an off-by-one vulnerability in the OPIE library CVE-2010-1938. This vulnerability affects certain FTP servers and may allow for Denial of Service DoS or arbitrary code execution. 📜 Description This script targets a known...

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156

Baron-Samedit-Heap-Buffer-Overflow-CVE-2021-3156 Version Vulnarable To The Exploit The Baron Samedit vulnerability CVE-2021-3156 affects sudo legacy versions 1.8.2 through 1.8.31p2 and stable versions 1.9.0 through 1.9.5p1. This heap-based buffer overflow flaw was introduced in July 2011 via comm...

cve-2016-6187-poc

poc for https://duasynt.com/blog/cve-2016-6187-heap-off-by-one-exploit...

CLEANSTART-2024-DX89382 Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry

Security vulnerability affects the libexif package. Off-by-one error in the exifconvertutf16toutf8 function in exif-entry...

cve-2021-3156

CVE-2021-3156 -- Baron Samedit Vulnerability Environment Create the image using Dockerfile docker build -t cve-2021-3156:ubuntu2004 . Create a container using the image docker run --rm -it cve-2021-3156:ubuntu2004 /bin/bash Vulnerability Cause In Sudo versions prior to 1.9.5p2 , there is an...