Advanced exploits that I wrote for Pwn2Own competitions and other occasions
☆170Mar 23, 2024Updated 2 years ago
Alternatives and similar repositories for Exploits
Users that are interested in Exploits are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Not necessarily related to software bugs and exploits; this repo contains snippets of code that demonstrate some interesting functionalit…☆34Apr 24, 2021Updated 5 years ago
- Files related to my training classes☆15Feb 15, 2021Updated 5 years ago
- Zero-day and N-day security vulnerability notes, analysis, and proof-of-concepts☆422Mar 20, 2022Updated 4 years ago
- Full Chain Analysis of CVE-2022-4262, a non-trivial feedback slot type confusion in V8.☆105Feb 12, 2025Updated last year
- ☆23Nov 5, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆14Nov 3, 2023Updated 2 years ago
- Full chain Chrome 71.0.3578.98 exploit☆21Jul 18, 2021Updated 5 years ago
- This repository contains the public work I produced, wheter it is research, post, slides, sometimes videos, and materials of my talks.☆53Aug 20, 2026Updated 2 months ago
- ☆131May 15, 2025Updated last year
- SSH & FTP brute-forcing tool written in python☆11Oct 2, 2024Updated 2 years ago
- ☆29Oct 5, 2026Updated 3 weeks ago
- A Pwn2Own 2024 SpiderMonkey JIT Bug: From Integer Range Inconsistency to Bound Check Elimination then RCE☆98Feb 12, 2025Updated last year
- POC of CVE-2022-21881 exploited at TianfuCup 2021 to escape Chrome Sandbox☆21Aug 9, 2022Updated 4 years ago
- ☆58Jan 29, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Static binary instrumentation for windows kernel drivers, to use with winafl☆81Feb 5, 2025Updated last year
- Slides about HyperDbg☆39Jul 8, 2026Updated 3 months ago
- Fuzzing IoT Devices Using the Router TL-WR902AC as Example☆133Nov 15, 2025Updated 11 months ago
- ☆17May 26, 2026Updated 5 months ago
- 2018 Advent Calendar browser pwnables☆14Feb 14, 2019Updated 7 years ago
- Google Chrome Use After Free☆60May 23, 2022Updated 4 years ago
- WTF Snapshot fuzzing of macOS targets☆99May 31, 2024Updated 2 years ago
- ☆25Oct 29, 2021Updated 5 years ago
- ☆15Nov 23, 2021Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Report and exploit of CVE-2023-36427☆91Nov 22, 2023Updated 2 years ago
- ☆142Aug 17, 2022Updated 4 years ago
- Damn Vulenerable Kernel Module for kernel fuzzing☆68Oct 24, 2024Updated 2 years ago
- A collection of links related to VMware escape exploits☆1,492Sep 4, 2024Updated 2 years ago
- My Chrome and Safari exploit code + write-up repo☆534Nov 5, 2021Updated 4 years ago
- Adobe Reader DC Information Leak Exploit☆23Oct 13, 2022Updated 4 years ago
- Work in progress experiments with reverse shells, AV bypass and extraction of secrets from memory in C☆39Dec 7, 2019Updated 6 years ago
- Coverage-Guided Greybox Distributed Fuzzer☆132Jan 26, 2026Updated 9 months ago
- Exploit for the [pwn] just-in-time challenge from google ctf 2018's finals (TurboFan bug)☆60Jan 26, 2019Updated 7 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- exploit development☆49Mar 14, 2018Updated 8 years ago
- ☆149Oct 20, 2026Updated last week
- OffensiveCon 2024 Repo, contains PoCs and materials for talk "UEFI and the Task of the Translator"☆43May 22, 2024Updated 2 years ago
- Repo for talk slides & materials☆21Nov 22, 2024Updated last year
- Kernel mode WinDbg extension and PoCs for token privilege investigation.☆1,028Sep 28, 2026Updated last month
- This is a proof of concept for CVE-2024-20356, a Command Injection vulnerability in Cisco's CIMC.☆54Apr 18, 2024Updated 2 years ago
- Fuzzing JavaScript WebAssembly APIs using Dharma/Domato (Chrome/v8, etc.)☆43Feb 8, 2022Updated 4 years ago