10250 matches found
cve-2020-16012
This repo contains PoCs for CVE-2020-16012, a side channel vulnerability in the implementation of CanvasRenderingContext2D.drawImage in Firefox and Chromium. Read a writeup of this vulnerability on the Mozilla Attack & Defense blog. Inside benchmark is code for measuring the timing of the...
rootkit-detection-ebpf-time-trace
Rootkit Detection with eBPF Time Tracing This repository contains code to collect time measurements of kernel functions that are manipulated by rootkits when they hide files, as well as a semi-supervised detection method that analyzes shifts of kernel function execution times. This implementation...
ch55x_firmware_extractor
CH55x firmware extractor The CH55x firmware extractor is used to read out firmware from CH55x integrated circuits. There is no in-built support in the devices for directly reading out the firmware through the bootloader. However, there is a functionality to verify the firmware contents 8 bytes at...
ShadowNet
Big Thanks to Jesus for making this gain attention! Turn to Jesus before it's too late. : He loves You To even further enhance your privacy and security; Use ShadowNet on your Host OS & Run Whonix in a VM to browse the web. Download Whonix here: https://www.whonix.org/ Please use a secure VM...
argumentinjectionhammer
Argument Injection Hammer Argument Injection Hammer es una extensión para el proxy interceptador Burp Suite que amplía la capacidad del escáner para detectar vulnerabilidades de inyección y manipulación de argumentos en aplicaciones y servicios web. Una aplicación web es vulnerable a la inyección...
CVE-2016-6210-Exploit
This is the first version of the "weaponized" exploit for CVE-2016-6210 Background: Posted by Eddie Harari on Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 The brief: By sending large passwords, a remote user can enumerate users on system that runs SSHD. This problem exists in mo...
nextpnr
nextpnr -- a portable FPGA place and route tool nextpnr aims to be a vendor neutral, timing driven, FOSS FPGA place and route tool. Currently nextpnr supports: Lattice iCE40 devices supported by Project IceStorm Lattice ECP5 devices supported by Project Trellis Lattice Nexus devices supported by...
mmiotic
mmiotic An exploratory tool for MMIO timing — time any physical address, and dissect the hardware off the latency. Unexpectedly useful for hardware reverse-engineering, hypervisor fingerprinting, side-channelling device activity, register characterization, calibrating malicious triggers, and...
CVE-2016-6210-exploit
CVE-2016-6210-exploit Custom exploit python 2.7 written for enumerating usernames as per CVE-2016-6210 OpenSSH 7.2-p2 & prior should only be used on authorised systems DESCRIPTION I wrote this program as a tool to exploit CVE-2016-6210, which is a vulnerability in OpenSSH before version 7.3...
poc-CVE-2025-38352
Exploit Details This repository only contains the proof-of-concept that triggers the vulnerability. I have since written a full exploit for this vulnerability. You can find the details in the link below. https://github.com/farazsth98/chronomaly Analysis Blog Posts Part 1 -...
CVE-2023-1206-CVE-2025-40040-CVE-2024-49882
Combined Covert Channel: CVE-2023-1206 + CVE-2024-49882 Overview This project demonstrates a covert communication channel using two Linux kernel vulnerabilities: Component| CVE| Purpose ---|---|--- Sync Channel| CVE-2023-1206| Clock synchronization via IPv6 hash collision timing Data Channel|...
wp_drupal_timing_attack
wpdrupaltimingattack Python scripts to exploit CVE-2014-9016 and CVE-2014-9034. For legal purposes only...
CVE-2024-29296
CVE-2024-29296 - User enumeration on Portainer CE - 2.19.4 A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or...
slipstream
NAT Slipstreaming NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall remote arbitrary firewall pinhole control, just by the victim visiting a website. v1 developed by : @SamyKamkar //...
sniffly
Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...
Characterization-and-Detection-of-Cross-Router-Covert-Channels
Characterization and Detection of Cross-Router Covert Channels This repository contains the source code used in the paper "Characterization and Detection of Cross-Router Covert Channels". To access the paper, go to Dr. Oren's laboratory website: orenlab. The full data used in the paper is...
cve-2018-15473
CVE-2018-15473 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. Install You may need t...
AVX-Side-Channel
AVX-Based Timing Side Channel — ASLR Detection Author: Byte Reaper Description script that demonstrates ASLR detection using an AVX memory load + RDTSCP timing and optional SIGSEGV detection. Requirements : Linux x8664 GCC with -mavx2 CPU that supports AVX2 and RDTSCP Build : root@kitploit: gcc...
http-request-smuggling
Herramienta de Detección de Contrabando de Solicitudes HTTP El contrabando de solicitudes HTTP es una vulnerabilidad de alta gravedad que consiste en una técnica donde un atacante introduce de forma encubierta una solicitud HTTP ambigua para eludir los controles de seguridad y obtener acceso no...
CVE-2019-9053
CVE-2019-9053 Improved code of Daniele Scanu SQL Injection exploit Following changes applied: Added time control variable -t or --time that enables user to extend the timing of SQL injection useful if a network connection in between hosts is subject of delays with packet transmission Network...