up777 Goto Github PK

cve-2019-0888

PoC for CVE-2019-0888 - Use-After-Free in Windows ActiveX Data Objects (ADO)

cve-2019-0986

Security Research

cve-2019-11708

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

cve-2019-1215

cve-2019-9810

Exploit for CVE-2019-9810 Firefox on Windows 64 bits.

dcef3

dirtycow-exp

编译好的脏牛漏洞（CVE-2016-5195）EXP

eps-cve-2017-0261

eps漏洞(CVE-2017-0261)漏洞分析

eqgrp

Decrypted content of eqgrp-auction-file.tar.xz

equationgroupleak

Archive of leaked Equation Group materials

eternalsakura.github.io

exploits

exploits-1

exploits and proof-of-concept vulnerability demonstration files from the team at Hacker House

fuzz-upnp

Fuzzing UPnP

fuzzer-test-suite

Set of tests for fuzzing engines

fuzzilli-for-quickjs

fuzzingpaper

Recent Fuzzing Paper

ghida

ghidra

Ghidra is a software reverse engineering (SRE) framework

grandstream_exploits

h-encore-2

Fully chained kernel exploit for the PS Vita on firmwares 3.65-3.73

hack2win-chrome

This is collaborative work of Ned Williamson and Niklas Baumstark

hacking-material-books

collection of articles/books about programing

htran

HTran is a connection bouncer, a kind of proxy server. A “listener” program is hacked stealthily onto an unsuspecting host anywhere on the Internet. When it receives signals from the actual target system, it redirects it to the hacker’s server.

idapyhelper

IDAPyHelper is a script for the Interactive Disassembler that helps writing IDAPython scripts and plugins.

issue-198327

A Webkit RCE exploit and an SBX bug

javacodeaudit

Getting started with java code auditing 代码审计入门的小项目

jfs

Constraint solver based on coverage-guided fuzzing

js-vuln-db

A collection of JavaScript engine CVEs with PoCs

jscpwn

PoC exploit for CVE-2016-4622