7625 matches found
Microsoft Edge V8 Type Confusion RCE (CVE-2026-58289)
CVE-2026-58289 for Edge Chromium before 150.0.4078.48. chainmode=probe injects the public PoC into a browserserver session no listener. chainmode=full runs a research chain: 58289 heap layout → Maglev fake object → addrof/fakeobj → WASM shellcode via self.payload. Full chain needs Edge with...
Exploit for Out-of-bounds Write in Mozilla Firefox
CVE-2024-29943, but with wasm Because chaining a real Pwn2O...
exploit-development-framework
Exploit Development Framework EDF A modular, educational ex...
shellcode — Updated!
shellcode “A vulnerability provides an assembly language for a computer that has never been programmed before, and that was not designed with programmability in mind.” -- Halvar Flake A collection of new and old shellcode samples. Article https://hnsecurity.it/blog/new-and-old-shellcode-samples/...
Malicious code in streak-math-calc (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f98537ccfd6214a3970375d9c210e83853153b35b19193b4b1850fe6450ed4f The package's main entry dist/index.mjs runs a top-level IIFE that chmod +x's a bundled ELF at dist/math-calc.bin and spawns it detached with piped...
Fritter v1.3
Fritter The evasive cousin of Donut. Fritter is a heavily modified fork of TheWover and Odzhan's Donut shellcode generator. It generates position-independent shellcode for in-memory execution of VBScript, JScript, EXE, DLL, and .NET assemblies, with a focus on evasion and signature resistance. Th...
MIPS BE reverse TCP shell (raw)
MIPS big-endian 32-bit connect-back stager: socket, connect, dup2 x3, execve //bin/sh. Typical on older big-endian routers. Output is raw bytes not a command string. !/usr/bin/env python3 -- coding: utf-8 -- Linux/MIPS BE reverse TCP + dup2 + execve"//bin/sh" — based on public shellcode by rigan...
Windows x64 Reverse TCP Stager
Position-independent x64 reverse TCP shellcode that connects back and spawns cmd.exe from kittysploit import class ModulePayload: """Windows x64 reverse TCP stager cmd.exe. Compatible with listeners/multi/reversetcp.""" info = "name": "Windows x64 Reverse TCP Stager", "description":...
Linux x86 Reverse TCP Stager
Position-independent x86 Linux reverse TCP shellcode socket+connect+dup2+/bin/sh from kittysploit import class ModulePayload: """Linux x86 reverse TCP stager connect + dup2 + execve /bin/sh.""" info = "name": "Linux x86 Reverse TCP Stager", "description": "Position-independent x86 Linux reverse T...
sgn v1.0.0-rs
SGN is a polymorphic binary encoder for offensive security purposes such as generating statically undetecable binary payloads. It uses a additive feedback loop to encode given binary instructions similar to LFSR. This project is the reimplementation of the original Shikata ga nai in golang with...
speakeasy v2.0.0b4
Speakeasy Speakeasy is a Windows malware emulation framework that executes binaries, drivers, and shellcode in a modeled Windows runtime instead of a full VM. It emulates APIs, process/thread behavior, filesystem, registry, and network activity so samples can keep moving through realistic executi...
binary-exploitation-writeups
Binary Exploitation CTF Writeups A comprehensive collection o...
Supernova v4.1
Supernova Shellcode encryptor & obfuscator. Description Supernova is an open-source tool that empowers users to securely encrypt and/or obfuscate their raw shellcode. -red?link=https%3A%2F%2Fgithub.com%2Fnickvourd%2FSupernova%2Freleases Supernova supports various features beyond those typically...
Malicious code in turbocalcng (PyPI)
Source: amazon-inspector 58f668de627f83b0348d681edd090804f202add609fdc9a3c671f987608fb448 turbocalcng/init.py imports arithmetic.py, which — beneath a facade of arithmetic helpers — contains an XOR-obfuscated in-memory native code execution path reachable at import time. A helper iReferringjk,d...
systems-exploitation-ctf
Systems Exploitation CTF Five offensive-security challenges s...
FTP Fetch, Hidden Bind Ipknock TCP Stager
Fetch and execute an x86 payload from an FTP server. Listen for a connection. First, the port will need to be knocked from the IP defined in KHOST. This IP will work as an authentication method you can spoof it with tools like hping. After that you could get your shellcode from any IP. The socket...
FTP Fetch, DNS TXT Record Payload Download and Execution
Fetch and execute an x86 payload from an FTP server. Performs a TXT query against a series of DNS records and executes the returned x86 shellcode. The DNSZONE option is used as the base name to iterate over. The payload will first request the TXT contents of the a hostname, followed by b, then c,...
FTP Fetch, Windows shellcode stage, Reverse TCP Stager (RC4 Stage Encryption DNS, Metasm)
Fetch and execute an x86 payload from an FTP server. Custom shellcode stage. Connect back to the attacker Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule include...
FTP Fetch, Windows shellcode stage, Reverse TCP Stager
Fetch and execute an x86 payload from an FTP server. Custom shellcode stage. Connect back to the attacker Module Options...
FTP Fetch, Windows shellcode stage, Reverse All-Port TCP Stager
Fetch and execute an x86 payload from an FTP server. Custom shellcode stage. Try to connect back to the attacker, on all possible ports 1-65535, slowly Module Options This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...