
ctl_ctloutput-leak
CVE-2017-13868: Information leak of uninitialized kernel heap data in XNU.

CVE-2017-13868: Information leak of uninitialized kernel heap data in XNU.

Proof-of-concept exploit for CVE-2026-14669, a PostgreSQL to_char() timezone abbreviation heap buffer overflow enabling RCE through information leak…

Heap overflow exploit for CVE-2021-22555 achieving local privilege escalation to root on Ubuntu 20.04 with kernel 5.8.0-48.

Exploit for CVE-2019-11932: generates a malicious GIF file to trigger a buffer overflow in WhatsApp, achieving remote code execution via system()…

Linux kernel use-after-free exploit for CVE-2017-11176 targeting the mq_notify function's Netlink socket handling, with step-by-step exploitation…

Search for Unix binaries that can be exploited to bypass system security restrictions.

Kernel Information Disclosure

Exploit analysis for CVE-2014-4378: information disclosure in Apple CoreGraphics via crafted PDF, enabling memory layout leak and bypass of ASLR,…

C-based proof-of-concept exploit for CVE-2022-4543 (EntryBleed), a Linux kernel vulnerability enabling information disclosure and potential privilege…

A buffer overflow vulnerability in the XNU kernel's ICMP error code causes IOS devices to crash (laptops and mobiles).

Exploit for CVE-2023-21688 combining a side-channel information leak with a use-after-free (UAF) chain for kernel privilege escalation.

Exploit for CVE-2019-6207: kernel heap information leak in getdirentriesattr on macOS <=10.14.4 and iOS <12.2, triggerable from sandbox.

Python-based exploit for CVE-2022-44268, an arbitrary file read vulnerability in ImageMagick. Poisons PNG images to read sensitive files from…

Technical analysis of CVE-2020-1206 (SMBleed) kernel information disclosure vulnerability in Windows SMBv3, including unauthenticated memory leak…

Proof-of-concept exploit for Linux kernel FUSE information leak (CVE-2024-44947), demonstrating beyond-EOF memory disclosure via mmap and including…

Exploit code for CVE-2020-8835, a Linux kernel information disclosure vulnerability, demonstrating the flaw and its exploitation.

Simple POC for exploiting WhatsApp double-free bug in DDGifSlurp in decoding.c in libpl_droidsonroids_gif

Collection of DEF CON 30 CTF challenge binaries, build scripts, and solve scripts for practicing binary exploitation and reverse engineering.