exploitarium

If you wish to collaborate/discuss with me, contact me on discor...

Exploit for Improper Access Control in Graylog

Exploiting Arbitrary Class Loading on the JVM This repository...

exploitarium-fork

If you wish to collaborate/discuss with me, contact me on discor...

exploitarium

If you wish to collaborate/discuss with me, contact me on discor...

exploitarium

If you wish to collaborate/discuss with me, contact me on discor...

NTForge Vulnerability Research / Exploit Reproduction Template

NTForge is a Windows 10/11 C++17 vulnerability-research and exploit-reproduction template intended for authorized testing and coordinated reporting to the Microsoft Security Response Center MSRC. It provides a documented native API resolver, internal structure references, safe memory primitives,...

exploitarium

Exploitarium A consolidated archive of my public proof-of-con...

vulntraceai-plugin

VulntraceAI — plugin & CLI Evidence-gated vulnerability res...

explotability_analysis_ebpf

eBPF Verifier Exploit Research — s344024 Romano Simone Resear...

FreeType SHZ Heap Buffer Overflow Verification Tool

This C proof of concept is designed to validate the presence of a potential heap buffer overflow in the TrueType bytecode interpreter of the FreeType library. The program initializes FreeType, loads a user-supplied modified TrueType font file, explicitly enables the interpreter mode, and attempts...

FreeType SHZ 2.14.3 Font Parsing Analyzer for Glyph Stability Assessment

This Python script performs basic robustness testing of font parsing behavior using the FreeType bindings by loading a target font and iterating through a large set of glyph indices. For each glyph, it attempts non-scaled and non-hinted glyph loading while collecting exceptions that may indicate...

📄 FreeType SHZ 2.14.3 Heap Buffer Overflow

This Python proof of concept framework is designed for security research into a reported heap buffer overflow condition affecting the FreeType TrueType bytecode interpreter. The code constructs specially crafted font structures intended to exercise the SHZ instruction path, generates malformed...

security-advisories

security-advisories Security advis...

DIG: Oracle-Guided Directed Input Generation for One-Day Vulnerabilities

One-day vulnerabilities pose significant risks due to delayed or incomplete patch adoption. Generating proof-of-concept PoC inputs is therefore essential for assessing real-world impact. The key challenge is identifying necessary constraints for triggering the vulnerability and solving them...

rspwner

RSPWNER RSPWNER is a Rust-based AI-assisted CTF pwn assistant...

Exploit for Improper Authentication in Wordpress

CVE-2008-1930 Exploitation Documentation Guide Document In...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Research Repository !License: MIThttps://i...

Exploit for Use After Free in Arm Avalon_Gpu_Kernel_Driver

CVE-2022-46395 QEMU r36p0 Lab This repository contains a QEMU...

Needles at Scale: LLM-Assisted Target Selection for Windows Vulnerability Research

The attack surface of a modern operating system is a haystack: thousands of signed binaries and millions of functions, almost none relevant to any given vulnerability. A human analyst or an LLM agent must pick the function worth reading before analyzing it. At whole-OS scope, this target selectio...

Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspective

1 Introduction This article provides a technical analysis of how many Windows kernel mode drivers can be interacted with from user mode without the hardware they were developed for. This work was motivated by driver-oriented vulnerability research and the need to evaluate the exploitability of...