
oxasploits
A number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast

A number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast

Detailed analysis and proof-of-concept exploit for CVE-2017-9822, an XXE/insecure deserialization vulnerability in DotNetNuke CMS leading to remote…

Python script to detect and exploit CVE-2021-44142 in Samba servers, dumping heap cookie and pointer via single SMB connection for vulnerability…

In-depth technical analysis and proof-of-concept for CVE-2017-9822, an insecure deserialization vulnerability in DotNetNuke leading to remote code…

Interactive PoC suite for CVE-2014-9222 (Misfortune Cookie) and related router exploits, featuring detection, auth bypass, DoS, and RCE modules with…

Technical analysis of CVE-2026-52924, a critical use-after-free in Linux kernel SCTP stale cookie handling, including root cause, attack flow, fix,…