Security research writeups
☆19Aug 8, 2026Updated 2 months ago
Alternatives and similar repositories for publications
Users that are interested in publications are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Exact-build Chrome M150 V8/JSPI sandbox escape PoC used to recover a Google v8CTF flag☆16Aug 26, 2026Updated last month
- ☆45Oct 10, 2025Updated last year
- Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that allows an application to gain …☆31Sep 21, 2026Updated last month
- This is a write up of the exploit I developed for the Pwn2Own Automotive 2026 competition.☆34Oct 13, 2026Updated last week
- PatchFuzz: Fuzzing for JavaScript Engine Incomplete Security Patches☆24Dec 17, 2025Updated 10 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A collection of in-depth studies authored by me on JavaScript engine vulnerabilities.☆51Feb 6, 2026Updated 8 months ago
- Talk presented at Offensivecon 2025 by Richard Abou Chaya and John Stephenson☆21Jun 12, 2025Updated last year
- A in-the-wild V8 type confusion bug.☆32Aug 8, 2025Updated last year
- Some V8 n-day exploits that I've written☆64Jun 7, 2026Updated 4 months ago
- Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability☆40Sep 24, 2026Updated 3 weeks ago
- ☆31May 20, 2026Updated 5 months ago
- A Model Context Protocol (MCP) server that gives AI agents live, stateful Windows RPC attack-surface research, built on James Forshaw's N…☆16Sep 30, 2026Updated 3 weeks ago
- ☆36Apr 14, 2025Updated last year
- ☆31Nov 25, 2025Updated 10 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Integer overflow in FreeType software, which also affects Chrome☆31Jul 14, 2026Updated 3 months ago
- ☆81May 15, 2026Updated 5 months ago
- My browser pwn collections. Mainly JavaScript engine stuff.☆37Mar 12, 2026Updated 7 months ago
- Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace (v8ctf submission)☆87Jun 3, 2024Updated 2 years ago
- ☆95Aug 26, 2025Updated last year
- ☆30Updated this week
- An uninitialized read vulnerability by incorrect Turboshaft Store-Store Elimination in V8.☆30Jan 29, 2026Updated 8 months ago
- TRACE is an agentic jailbreaking framework that can reduce attack difficulty, induce the agent to execute end-to-end attack workflows thr…☆40Oct 1, 2026Updated 3 weeks ago
- Binary exploitation exercises and scripts☆13Mar 15, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆13Apr 4, 2022Updated 4 years ago
- docs/notes/writeups about CTF pwning☆12Oct 8, 2025Updated last year
- original dev repo for chromium //third_party/ipcz☆43Apr 24, 2024Updated 2 years ago
- ☆19Feb 25, 2026Updated 7 months ago
- My personnal repository☆10Sep 2, 2025Updated last year
- Theme for Sublime Text inspired by Adobe Brackets☆10Oct 12, 2026Updated last week
- StegsnowBruteForcer — outil Python pour brute-force de mots de passe dans les documents.☆15Feb 17, 2026Updated 8 months ago
- ☆40Jun 4, 2026Updated 4 months ago
- WebGL fuzzer☆39Mar 13, 2023Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- [D^3CTF 2022] pwn-d3guard attachment and official writeup (English & Chinese)☆14Mar 9, 2022Updated 4 years ago
- Quickly find differences and similarities in disassembled code☆22Jul 20, 2026Updated 3 months ago
- ☆14Sep 17, 2026Updated last month
- Tool to keep Track of Chromium Releases with automatic Commit detection for V8 bugs☆16Dec 4, 2025Updated 10 months ago
- blog☆14Jan 1, 2020Updated 6 years ago
- Writeups for ECSC 2019 National Phase☆10Jun 5, 2019Updated 7 years ago
- Full Chain Analysis of CVE-2022-4262, a non-trivial feedback slot type confusion in V8.☆105Feb 12, 2025Updated last year