wp_drupal_timing_attack

wpdrupaltimingattack Python scripts to exploit CVE-2014-9016 and CVE-2014-9034. For legal purposes only...

sniffly

Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...

ssh_user_enum

sshenumv0.3.py Usage: sshenumv0.3.py options Options: -h, --help Show this help message and exit -u --userlist Specify a new line delimited username file -i --ip Specify the target -m --multiplier Specify the multiplier for the password used to cause the delay -t --threshold Adjust the threshold...

lucky13

LUCKY13 Exploit This repository contains a proof-of-concept POC exploit for the LUCKY13 vulnerability CVE-2013-0169, which is a timing attack against certain implementations of the CBC Cipher Block Chaining mode of operation in cryptographic systems. The exploit aims to decrypt a target token by...

CVE-2016-6210-Exploit

This is the first version of the "weaponized" exploit for CVE-2016-6210 Background: Posted by Eddie Harari on Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 The brief: By sending large passwords, a remote user can enumerate users on system that runs SSHD. This problem exists in mo...

cve-2020-16012

This repo contains PoCs for CVE-2020-16012, a side channel vulnerability in the implementation of CanvasRenderingContext2D.drawImage in Firefox and Chromium. Read a writeup of this vulnerability on the Mozilla Attack & Defense blog. Inside benchmark is code for measuring the timing of the...

slipstream

NAT Slipstreaming NAT Slipstreaming allows an attacker to remotely access any TCP/UDP service bound to any system behind a victim's NAT, bypassing the victim's NAT/firewall remote arbitrary firewall pinhole control, just by the victim visiting a website. v1 developed by : @SamyKamkar //...

mt6985-CVE-2026-43499

CVE-2026-43499 Failure Log: MT6985 Adaptation Attempt Conclusion : Spent 68M tokens, no root obtained. Reason : KernelSnitch timing attack is unreliable on MTK Dimensity 9200, and CONFIGPANICONOOPS=y leaves no room for trial and error. This article documents the complete troubleshooting process f...

CVE-2025-68621

CVE-2025-68621 — Trilium Notes Timing Attack on /api/login/sync Severity: HIGH CVSS 7.4 Affected Software: TriliumNext/Trilium 0.101.0 Vulnerability Type: CWE-208 – Observable Timing Discrepancy Fixed In: Trilium 0.101.0 PR 8129 Published: 2026-02-06 | Reserved: 2025-12-19 Table of Contents 1. My...

ch55x_firmware_extractor

CH55x firmware extractor The CH55x firmware extractor is used to read out firmware from CH55x integrated circuits. There is no in-built support in the devices for directly reading out the firmware through the bootloader. However, there is a functionality to verify the firmware contents 8 bytes at...

sap_bo_launchpad-ssrf-timing_attack

SAP BusinessObjects Launchpad SSRF & Timing Attack PoC This Python script is a proof-of-concept PoC for executing SSRF Server-Side Request Forgery and Timing Attacks against SAP BusinessObjects Launchpad. It is designed to help security researchers and professionals identify open ports on a targe...

CVE-2026-26717

CVE-2026-26717: HMAC Timing Attack in OpenFUN Richie LMS Author: Elvin Latifli CVE ID: CVE-2026-26717 Severity: Medium CVSS 3.1: 4.8 — AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Affected Product: OpenFUN Richie all versions prior to commit a1b5bbd Affected Component: src/richie/apps/courses/api.py —...

CTT-enhanced-Apache-mod_auth_digest-timing-attack-exploit

CTT-enhanced-Apache-modauthdigest-timing-attack-exploit CTT-Enhanced Apache modauthdigest Timing Attack — CVE-2026-33006 Remote Digest Authentication Bypass → 33-Layer Temporal Timing Attack Original vulnerability: Apache HTTP Server 2.4.66 modauthdigest timing leak CTVSS Original: 4.8 Medium...

CVE-2026-25050

CVE-2026-25050 – Authentication Timing Attack This repository contains a Proof of Concept demonstrating a timing attack affecting the NativeAuthenticationStrategy.authenticate method. This PoC is provided as a technical demonstration for blog / research purposes. Vulnerability The authentication...

CVE-2016-6210

CVE-2016-6210 User name enumeration against SSH daemons affected by CVE-2016-6210. Use against your own hosts only! Attacking stuff you are not permitted to may put you in big trouble! INSTALATION Clone the Repository: git clone https://github.com/coolbabayaga/CVE-2016-6210.git cd...

Security Bulletin: IBM HTTP Server is affected by multiple vulnerabilities due to the included Apache Portable Runtime Utility

Summary IBM HTTP Server used by IBM WebSphere Application Server is affected by multiple vulnerabilities due to Apache Portable Runtime Utility. Vulnerability Details CVEID:CVE-2026-32327 DESCRIPTION: A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library...

CVE-2016-6210-exploit

CVE-2016-6210-exploit Custom exploit python 2.7 written for enumerating usernames as per CVE-2016-6210 OpenSSH 7.2-p2 & prior should only be used on authorised systems DESCRIPTION I wrote this program as a tool to exploit CVE-2016-6210, which is a vulnerability in OpenSSH before version 7.3...

Important: edk2

Issue Overview: Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possib...

SUSE SLED15 / SLES15 Security Update : python-oauthlib (SUSE-SU-2026:4810-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4810-1 advisory. - CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript...

Security update for python-oauthlib

This update for python-oauthlib fixes the following issues: CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation bsc1283526. CVE-2026-49265: Oauthlib: Timing Attack Vulnerability in PKCE codeverifier Comparison bsc1283527...