cve-2018-15473

CVE-2018-15473 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. Install You may need t...

wp_drupal_timing_attack

wpdrupaltimingattack Python scripts to exploit CVE-2014-9016 and CVE-2014-9034. For legal purposes only...

nextpnr

nextpnr -- a portable FPGA place and route tool nextpnr aims to be a vendor neutral, timing driven, FOSS FPGA place and route tool. Currently nextpnr supports: Lattice iCE40 devices supported by Project IceStorm Lattice ECP5 devices supported by Project Trellis Lattice Nexus devices supported by...

cve-2020-16012

This repo contains PoCs for CVE-2020-16012, a side channel vulnerability in the implementation of CanvasRenderingContext2D.drawImage in Firefox and Chromium. Read a writeup of this vulnerability on the Mozilla Attack & Defense blog. Inside benchmark is code for measuring the timing of the...

argumentinjectionhammer

Argument Injection Hammer Argument Injection Hammer is an extension for the intercepting proxy Burp Suite that extends the scanner's ability to detect argument injection and manipulation vulnerabilities in web applications and web services. A web application is vulnerable to argument injection wh...

ssh_user_enum

sshenumv0.3.py Usage: sshenumv0.3.py options Options: -h, --help Show this help message and exit -u --userlist Specify a new line delimited username file -i --ip Specify the target -m --multiplier Specify the multiplier for the password used to cause the delay -t --threshold Adjust the threshold...

mt6985-CVE-2026-43499

CVE-2026-43499 Failure Log: MT6985 Adaptation Attempt Conclusion : Spent 68M tokens, no root obtained. Reason : KernelSnitch timing attack is unreliable on MTK Dimensity 9200, and CONFIGPANICONOOPS=y leaves no room for trial and error. This article documents the complete troubleshooting process f...

poc-CVE-2025-38352

Exploit Details This repository only contains the proof-of-concept that triggers the vulnerability. I have since written a full exploit for this vulnerability. You can find the details in the link below. https://github.com/farazsth98/chronomaly Analysis Blog Posts Part 1 -...

smiiiiiiiiiiiiiiii

smiiiiiiiiiiiiiiii Exploiting System Management Mode with a very very very very very very very long interrupt. Overview It turns out that you can break SMM — the secure, ultra privileged execution environment running invisibly in the background of every x86 CPU — with nothing more than an obscene...

CVE-2023-27997-check

CVE-2023-27997 Vulnerability Assessment Tool Safely detect whether a FortiGate SSL VPN instance is vulnerable to CVE-2023-27997 based on response timing. See the full write-up at the Bishop Fox blog, including a complete walkthrough of the methodology behind this tool. Description CVE-2023-27997 ...

CVE-2016-6210-Exploit

This is the first version of the "weaponized" exploit for CVE-2016-6210 Background: Posted by Eddie Harari on Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 The brief: By sending large passwords, a remote user can enumerate users on system that runs SSHD. This problem exists in mo...

captaincredz

CaptainCredz TL;DR CaptainCredz is a modular and discreet password-spraying tool, with advanced features such as a cache mechanism and a fine-grained timing control. To start using captaincredz, the following lines may be useful: TEXTEDITOR=nano git clone https://github.com/synacktiv/captaincredz...

sshamble

sshamble SSHamble is a research tool for SSH implementations that includes: Interesting attacks against authentication Post-session authentication attacks Pre-authentication state transitions Authentication timing analysis Post-session enumeration This project is a work-in-progress and likely to...

TimeException

Disclaimer This tool is provided for educational purposes only. Any actions and activities related to the material contained within this repository are solely your responsibility. Misusing this tool can result in criminal charges against the persons in question. The author will not be held...

wp2shell-scanner

wp2Shell Scanner – with PoC CVE-2026-63030 and CVE-2026-60137 – WordPress wp2shell vulnerability-chain scanner Authorized security-research tool with optional command-verification PoC. wp2shell-scanner detects the WordPress wp2shell vulnerability chain by validating public WordPress evidence,...

WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion

WordPress core versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 are vulnerable to a pre-authentication route confusion issue in the REST API batch endpoint /?restroute=/batch/v1. A malformed nested batch request desynchronizes the batch router, allowing unauthenticated requests to reach...

sniffly

Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...

InfinityCore-Android-CVE-2026-98385

InfinityCore Android — CVE-2026-98385 Scheduler Chinese Overview ARM64 implementation of the Infinity Core series Scheduler subsystem vulnerability. The target kernel is the official test form of this CVE 7.0 / 7.2 series. The mechanism, race timing, and heap layout are fully ported according to...

spectre-attack-example

Spectre Attack Example January 2, 2018 CVE-2017-5753 and CVE-2017-5715 "Spectre" exploit example What is this? We place the text "The Magic Words are Squeamish Ossifrage." in memory, and then we attempt to read it using the vulnerability. If the system is vulnerable, you will see the same text on...

CVE-2025-68621

CVE-2025-68621 — Trilium Notes Timing Attack on /api/login/sync Severity: HIGH CVSS 7.4 Affected Software: TriliumNext/Trilium 0.101.0 Vulnerability Type: CWE-208 – Observable Timing Discrepancy Fixed In: Trilium 0.101.0 PR 8129 Published: 2026-02-06 | Reserved: 2025-12-19 Table of Contents 1. My...