sickcodes / no-sandbox
No Sandbox - Applications That Run Chromium and Chrome Without The Sandbox. TL;DR exploits in these browser based applications are already sandboxed escaped: https://no-sandbox.io/
☆179Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for no-sandbox
- PoC for CVE-2021-28476 a guest-to-host "Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys.☆218Updated 3 years ago
- Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.☆231Updated 3 years ago
- Minimal code to connect to a CEF debugger.☆197Updated 4 years ago
- A WIP "Vulnerable by Design" kext for iOS/macOS to play & learn *OS kernel exploitation☆230Updated 3 years ago
- 🐱💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2…☆165Updated 3 years ago
- PoC for CVE-2022-28281 a Mozilla Firefox Out of bounds write.☆74Updated 2 years ago
- A Docker image with four popular Java decompilers in one place (CFR, Fernflower, Krakatau, and Procyon)☆72Updated 2 years ago
- Select proof-of-concept exploits for software vulnerabilities to aid in identifying and testing vulnerable systems.☆181Updated 6 months ago
- ☆139Updated 2 years ago
- CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server☆121Updated 2 years ago
- writeup of CVE-2020-1362☆233Updated 4 years ago
- Web-based reverse shell generator☆168Updated 3 years ago
- XS-Leak Browser Test Suite☆73Updated 11 months ago
- PoC of CVE-2020-16947 (Microsoft Outlook RCE vulnerablility)☆125Updated 4 years ago
- A proper well structured documentation for getting started with chrome pwning & v8 pwning☆188Updated 2 years ago
- loot source code from sonarqube☆81Updated 4 years ago
- research☆150Updated 8 months ago
- Linux kernel exploits for local privilege escalation☆76Updated 6 years ago
- LPE for CVE-2020-1054 targeting Windows 7 x64☆86Updated 4 years ago
- A curated list of awesome browser security learning material.☆130Updated 2 years ago
- ☆243Updated 2 years ago
- ☆167Updated 2 years ago
- HoneyPoC: Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Se…☆281Updated 3 years ago
- A little bit less hackish way to intercept and modify non-HTTP protocols through Burp & others.☆202Updated 2 years ago
- A bash script that automates the exfiltration of data over dns in case we have blind command execution on a server with egress filtering☆209Updated 3 years ago
- 0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119☆138Updated 3 years ago
- d(ockerp)wn - a docker pwn tool manager☆155Updated 3 years ago
- CVE-2022-0185☆366Updated 2 years ago
- collect for learning cases☆567Updated 5 months ago