2362 matches found
chipsec
CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...
POC-CVE-2018-4327-and-CVE-2018-4330
brokentooth POC for CVE-2018-4327 atleast I think so since CVE-2018-4327 and CVE-2018-4330 were both written about by @SparkZheng but it does not say which once relates to which bug but since he described this one first then I'm taking a guess. Tested on iPhone 6S 11.3.1 Should work until 11.4...
Ustealer
Ustealer Ubuntu stealer, steal ubuntu information in local pc nice with usb key Require G++ sudo apt-get install g++ libsqlite3 sudo apt-get install libsqlite3-dev Compilation Go in Ustealer/ folder and run makefile make Use ./ustealer...
r4ven
If you find this GitHub repo useful, please consider giving it a star! ⭐️ ▶️ Watch Video - How To Use! This project is a security research and awareness tool designed to demonstrate how modern web browsers may expose location data, camera access, IP address, and device information when users...
functrace
functrace - A function tracer functrace is a tool that helps to analyze a binary file with dynamic instrumentation using DynamoRIO http://dynamorio.org/. These are some implemented features based on DynamoRIO: disassemble all the executed code disassemble a specific function dump if these are...
POC-of-CVE-2022-36271
POC-de-CVE-2022-36271 El nombre del producto afectado : Outbyte PC Repair Installation File La versión afectada : 1.7.112.7856 El ID de CVE para la entrada : CVE-2022-36271 Descripción: iertutil.dll falta, por lo que un atacante puede usar un dll malicioso con el mismo nombre y puede obtener...
mediacodecoob
mediacodecoob fuga de información y control de PC poc para CVE-2015-6620 24445127, agregaré después de la conferencia...
CVE-2025-2502
Encontrado accidentalmente mientras se aprendía sobre escalada de privilegios locales. En cualquier versión de Lenovo PC Manager, las herramientas de Lenovo PC Manager tienen un defecto de permisos. Siempre que se descargue una herramienta, los usuarios normales tienen permiso F permiso completo...
toothfairy
toothfairy Relacionado con brokentooth enlace abajo. A diferencia de brokentooth, toothfairy no requiere presionar botones en el menú de bluetooth. Ambos CVE fueron revelados por @SparkZheng pero sin PoC, así que decidí hacer un PoC para fines de aprendizaje. El código no es perfecto pero cumple ...
CVE-2022-34301
🕷️ CVE-2022-34301 - Eurosoft Boot Loader Vulnerability Eurosoft Pc-Check UEFI Diagnostics Shell - Bring Your Own Vulnerable UEFI Application BYOVUA - Secure Boot bypass via signed UEFI Shell and gSecurity2 corruption. 📑 Table of Contents Overview Background Bring Your Own Vulnerable UEFI...
CVE-2023-3519
CVE-2023-3519 Porque puedes ejecutar powershell en el PC de tu mamá sin tener que instalar NMAP ni PYTHON ni contarle a nadie que usas ARCH! ; x...
swsim
swSIM Project needs to be cloned recursively. Downloading the ZIP is not enough. swSIM is an all-software SIM card. It's the first publicly available to the best of my knowledge SIM card simulator which does not rely on any SIM hardware to work. Scope A software-only SIM card simulator. It does N...
swsim
swSIM 프로젝트는 반드시 재귀적으로 클론해야 합니다. ZIP 다운로드만으로는 부족합니다. swSIM은 완전한 소프트웨어 기반 SIM 카드입니다. 제가 아는 한, 어떤 SIM 하드웨어에도 의존하지 않는 최초로 공개된 SIM 카드 시뮬레이터입니다. 범위 소프트웨어 전용 SIM 카드 시뮬레이터입니다. 작동에 어떤 하드웨어에도 의존하지 않습니다. swICC PC/SC 리더기를 사용하여 PC/SC를 통해 PC에 연결할 수 있습니다. PC/SC 인터페이스를 통해 SIM 카드 슬롯이 있는 모든 휴대폰에 연결할 수 있습니다. 우리는...
hsm
zhsm A Hardware Security Module HSM library for Zig providing PC/SC access to PIV , CAC , and YubiKey tokens. Status Aspect| Info ---|--- API Stability| Development Zig Version| 0.16.0 Platforms| Linux, macOS, Windows License| MIT Features PIV Support NIST SP 800-73-4 Certificate retrieval slots...
CVE-2026-19136
A potential command injection vulnerability was reported in the Tianxi AI Agent PC Application, distributed exclusively in the Chinese market, that could allow operating system commands to be executed if a local user opens a specially crafted link that is handled by the application...
CVE-2026-19136
A potential command injection vulnerability affects the Tianxi AI Agent PC Application , distributed exclusively in the Chinese market. If a local user opens a specially crafted link handled by the application, it could allow execution of operating system commands, resulting in high impact to con...
CVE-2025-63946-Tencent-PC-Manager-EoP
CVE-2025-63946 Escalada de Privilegios en Tencent PC Manager versión: PCManager versión menor o igual a 17.10.28554.205 Resumen: Descubrí una vulnerabilidad en Tencent PC Manager donde los archivos y directorios bajo C:\Windows\Temp se manejan de forma insegura. Un atacante puede aprovechar ataqu...
CVE-2026-21098
Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...
CVE-2016-3861
CVE-2016-3861 An extended version of Mark Brand's libutils exploit, from the Google Project Zero blog post: https://googleprojectzero.blogspot.com/2016/09/return-to-libstagefright-exploiting.html Main differences: all of the mp4 files used for exploitation are generated in the browser dynamically...
