Zero-day and N-day security vulnerability notes, analysis, and proof-of-concepts
☆422Mar 20, 2022Updated 4 years ago
Alternatives and similar repositories for Disclosures
Users that are interested in Disclosures are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Not necessarily related to software bugs and exploits; this repo contains snippets of code that demonstrate some interesting functionalit…☆34Apr 24, 2021Updated 5 years ago
- Advanced exploits that I wrote for Pwn2Own competitions and other occasions☆170Mar 23, 2024Updated 2 years ago
- A collection of links related to VMware escape exploits☆1,492Sep 4, 2024Updated 2 years ago
- PoC for CVE-2019-0888 - Use-After-Free in Windows ActiveX Data Objects (ADO)☆39Jul 9, 2019Updated 7 years ago
- Files related to my training classes☆15Feb 15, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Windows 10 RS2/RS3 exploitation primitives based on the OffensiveCon 2018 talk☆59Feb 27, 2018Updated 8 years ago
- Dump of win32k POCs for bugs I've found☆381Mar 6, 2022Updated 4 years ago
- My Chrome and Safari exploit code + write-up repo☆534Nov 5, 2021Updated 4 years ago
- September Chrome 1day by István Kurucsai☆81Sep 9, 2019Updated 7 years ago
- A Collection of Chrome Sandbox Escape POCs/Exploits for learning☆871Jun 4, 2020Updated 6 years ago
- keynote I gave at GreHack 2019☆19Nov 17, 2019Updated 6 years ago
- Toolkit for Hyper-V security research☆154Mar 7, 2022Updated 4 years ago
- Exploit for a bug in TurboFan's typing of JSCall nodes for builtins kStringLastIndexOf and kStringIndexOf☆59Apr 25, 2019Updated 7 years ago
- Binary coverage tool without binary modification for Windows☆450Aug 12, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Project Zero Docs and Tools☆856Feb 4, 2026Updated 8 months ago
- Attacking-Edge-Through-the-JavaScript-Compiler☆92Feb 15, 2019Updated 7 years ago
- Analysis of public exploits or my 1day exploits☆617Oct 1, 2020Updated 6 years ago
- DynamoRIO plugin to get ASAN and SanitizerCoverage compatible output for closed-source executables☆214Sep 17, 2021Updated 5 years ago
- awesome list of browser exploitation tutorials☆2,307Sep 18, 2023Updated 3 years ago
- PoC exploiting Aligned Chunk Confusion on Windows kernel Segment Heap☆213Jul 2, 2020Updated 6 years ago
- List of Awesome Advanced Windows Exploitation References☆1,570Jan 13, 2022Updated 4 years ago
- Blazefox exploits for Windows 10 RS5 64-bit.☆149Dec 9, 2019Updated 6 years ago
- A curated list of Hyper-V exploitation resources, fuzzing and vulnerability research.☆476Apr 11, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Windows syscall fuzzer that I used in 2017 & 2018. Not much to say about it but maybe helpful to someone. At least syscall information it…☆20Nov 20, 2019Updated 6 years ago
- An updated collection of resources targeting browser-exploitation.☆833Mar 8, 2021Updated 5 years ago
- ☆133Dec 15, 2019Updated 6 years ago
- ☆152Jan 6, 2019Updated 7 years ago
- Windows Graphics Device Interface (GDI+) fuzzer☆130Aug 13, 2020Updated 6 years ago
- Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android☆1,392Aug 25, 2026Updated 2 months ago
- Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.☆626Jun 13, 2020Updated 6 years ago
- adobe afdko fuzz☆39Aug 12, 2019Updated 7 years ago
- PoC for CVE-2017-0075☆34Sep 12, 2019Updated 7 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆384Jan 12, 2024Updated 2 years ago
- ☆149Jan 7, 2020Updated 6 years ago
- A JavaScript Engine Fuzzer☆2,373Updated this week
- TrueType and OpenType font fuzzing toolset☆437Aug 28, 2019Updated 7 years ago
- Kernel driver to fuzz Hyper-V hypercalls☆139Feb 15, 2019Updated 7 years ago
- Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities☆414Mar 19, 2021Updated 5 years ago
- PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys.☆226Jun 1, 2021Updated 5 years ago