Proxyshell-Scanner

Proxyshell-Scanner escáner nuclei para Proxyshell RCE CVE-2021-34423,CVE-2021-34473,CVE-2021-31207 descubierto por orange tsai en Pwn2Own, que afecta al servidor microsoft exchange. POC Recursos https://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html...

cve-2024-4406-xiaomi13pro-exploit-files

cve-2024-4406-xiaomi13pro-exploit-files Archivos relacionados con el exploit de Pwn2Own Toronto 2023 contra el Xiaomi 13 Pro...

CVE-2025-50168-pwn2own-berlin-2025

Author: D4m0n CVE-2025-50168 This is an exploit submitted to Pwn2Own Berlin 2025 - LPE Category. The vulnerability occurs in Win32kbase!DirectComposition, and further details can be found in the blog post. Acknowledgements kASLR bypass technique: prefetch-tool by carrotc4k3 Special thanks to: Dav...

Exploits_and_Advisories

Exploits y Avisos Repositorio que rastrea exploits, vulnerabilidades y avisos públicos que co-descubrí o co-redacté. CVEs CVE| ID| Objetivo| Descripción| Divulgación ---|---|---|---|--- CVE-2020-10881| ZDI-20-333| TP-Link Archer A7/C7| desbordamiento de pila DNS| Pwn2Own Tokyo 2019 CVE-2020-10882...

canon-mf644

Released tools and scripts for Canon MF644 Exploit for Pwn2Own 2021 - Vulnerability in CADM firmware 10.02 This repository contains the following files related to the exploit: exploit.py : Python exploit working against firmware in version 10.02 Makefile : Makefile used to assemble the ARM...

CVE-2024-29943

CVE-2024-29943 Un bug de JIT de SpiderMonkey de Pwn2Own: Desde inconsistencia en el rango de enteros hasta eliminación de comprobación de límites y luego RCE. Este repositorio contiene PoC, Exploit y Diapositivas de Análisis para CVE-2024-29943. Demo Demo.mp4 Diapositivas Slides.pdf Información...

printer-cracktro

printer cracktro My Pwn2Own entries for Pwn2Own Toronto 2022 targeted two different printers. One is Linux based Lexmark and other is DryOS based CANON. After pwning the software on the printer the entries would display a little oldschool crack-intro animation thing to celebrate/illustrate the...

CVE-2024-5243-pwn2own-toronto-2023

CVE-2024-5243-pwn2own-toronto-2023 TP-Link ER605 Pre-Auth RCE CVE-2024-5242 / CVE-2024-5243 / CVE-2024-5244 Cadena de explotación PoC dirigida al daemon de cliente DDNS cmxddnsd del TP-Link Omada ER605 cuando el dispositivo está configurado para usar el servicio Comexe DDNS. ⚠️ Legal / Ética : Est...

lexmark

Trucs d'imprimante Lexmark Ce dépôt contient tout le travail lié aux imprimantes Lexmark que j'ai rendu public. La plupart d'entre vous sont probablement ici pour les utilitaires de déchiffrement du firmware ; consultez le dossier tools. Le dossier exploit contient un exploit 0day à l'époque que...

Pwn2Own-Auto-2024-CHARX

Pwn2Own Automotive 2024 CHARX Exploit This exploit was submitted successfully against the Phoenix Contact CHARX SEC-3100 during Pwn2Own Automotive 2024. An accompanying blog post covers some of our research process and details on the vulnerabilities found, with a follow-up post on the actual...

CVE-2021-44142

Comprobador de vulnerabilidad CVE-2021-44142 Una herramienta para comprobar si un servidor Samba es vulnerable a CVE-2021-44142 Antecedentes CVE-2021-44142 es una lectura y escritura fuera de los límites del montículo en el módulo vfsfruit de Samba, utilizada en Pwn2Own Austin 2021 contra el...

pwn2own2018

Pwn2Own 2018 : Safari + macOS RCE sur Safari, évasion du sandbox et LPE jusqu'au noyau pour macOS 10.13.3. Utilisation Installez nasm et tornado : root@kitploit: brew install nasm pip3 install tornado Consultez config.py si vous souhaitez changer l'hôte ou les ports. Démarrez ensuite le serveur...

Netgear_Pwn2Own2021

Netgear R6700v3 WAN RCE - Pwn2Own 2021 This is the code used during Pwn2Own 2021 to get a remote shell on the Netgear R6700v3. Blogpost: https://synacktiv.com/publications/pwn2own-austin-2021-defeating-the-netgear-r6700v3 Requirements python3 with flask dnsmasq Usage 1. Run as root ./play.sh ifna...

CVE-2023-35001

Exploit de lectura/escritura oob en nftables CVE-2023-35001 Exploit utilizado en pwn2own Vancouver 2023 en el escritorio de Ubuntu. El exploit es compatible con la versión del kernel disponible al comienzo del evento 5.19.0-35. Requisitos Compilador de C Compilador de Go Uso root@kitploit: Build ...

buherablog-cve-2013-1488

Java Pwn2Own exploit - CVE-2013-1488 Proof-of-Concept exploit by axt based on the writeup by James Forshaw Affects JRE versions before 7u21...

CVE-2020-10882

Reference links https://www.zerodayinitiative.com/blog/2020/4/6/exploiting-the-tp-link-archer-c7-at-pwn2own-tokyo https://github.com/rdomanski/ExploitsandAdvisories/blob/master/advisories/Pwn2Own/Tokyo2019/laobomb.md...

CVE-2021-27246_Pwn2Own2020

Pwn2Own 2020 Tokyo Edition - TPlink exploit Here is the files used to exploit the TPlink Archer router during the Pwn2Own 2020 Tokyo. The vulnerability has CVE-2021-27246 number. You can check blogpost on the synacktiv website for the details...

CVE-2024-29943

CVE-2024-29943 A Pwn2Own SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE. Reproducing CVE-2024-29943 for Windows, based on https://github.com/bjrjk/CVE-2024-29943 Modifications The original exploit is written for Linux, so I attempted to reproduce it on...

cve-2013-1300

Esto no funciona, pero está casi completo para ser un exploit funcional... https://labs.mwrinfosecurity.com/blog/2013/09/06/mwr-labs-pwn2own-2013-write-up---kernel-exploit/...

paracosme

Paracosme - CVE-2022-33318 - Exécution de code à distance dans ICONICS Genesis64 Paracosme est un exploit de corruption mémoire que j'ai écrit pour cibler la suite Genesis64 v10.97.1 développée par ICONICS afin d'obtenir une exécution de code à distance. L'exploit a été démontré lors du concours...