drtychai / browser-exploitationLinks
A collection of curated resources and CVEs I use for research.
☆108Updated 4 years ago
Alternatives and similar repositories for browser-exploitation
Users that are interested in browser-exploitation are comparing it to the libraries listed below
Sorting:
- A proper well structured documentation for getting started with chrome pwning & v8 pwning☆201Updated 3 years ago
- Vulnerability research notes for VirtualBox and QEMU. Contains debug environment setup notes, a PoC template, exploit primitive notes, an…☆194Updated last year
- Automatic ROPChain Generation☆293Updated 5 years ago
- 0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119☆144Updated 4 years ago
- ☆154Updated 6 years ago
- Windows Graphics Device Interface (GDI+) fuzzer☆129Updated 5 years ago
- harness for fuzzing with winafl. both public and my own which i have released.☆58Updated 4 years ago
- JavaScript Fuzzing framework for v8☆138Updated 3 years ago
- ☆199Updated 2 years ago
- ☆98Updated 2 years ago
- An intentionally vulnerable linux driver for research purposes/practice in kernel exploit dev☆126Updated 8 years ago
- "Pwntools does not support Windows. Use a real OS ;)" — Zach Riggle, 2015☆88Updated 6 years ago
- An awesome list for Effective and Powerful harnesses for fuzzing using libfuzzer - fuzzers by Google☆76Updated 5 years ago
- Old and new CTFs about Linux kernel exploitation.☆60Updated 3 years ago
- ☆120Updated 2 months ago
- Repository of the findings found by wtf when fuzzing IDA75.☆86Updated 4 years ago
- A tool for finding the one gadget RCE in libc☆78Updated 5 years ago
- Code execution via corrupting mmap malloc chunks with ASLR bypass☆43Updated 3 years ago
- ☆89Updated 3 years ago
- This is the full file system fuzzing framework that I presented at the Hack in the Box 2020 Lockdown Edition conference in April.☆149Updated 2 years ago
- qemu vulnerablity.☆54Updated 4 years ago
- My solutions for CTF challenges☆73Updated 3 weeks ago
- Research related☆89Updated 3 years ago
- Corpus of public v8 vulnerability PoCs.☆218Updated 4 years ago
- Fuzzing library written in/for python.☆85Updated 5 years ago
- Web user interface and service agent for the monitoring and remote management of WinAFL.☆58Updated 2 months ago
- My conference presentations and Materials for them.☆32Updated 3 years ago
- A tool for effective testing the binding layer of scripting languages☆79Updated 3 years ago
- A DOM fuzzer☆153Updated 3 years ago
- Exploit for the [pwn] just-in-time challenge from google ctf 2018's finals (TurboFan bug)☆61Updated 6 years ago