
CVE-2022-2274
OpenSSL-src Heap Memory Corruption with RSA Private Key Operation : CVE-2022-2274

OpenSSL-src Heap Memory Corruption with RSA Private Key Operation : CVE-2022-2274

Christmas-themed CTF Advent Calendar with 12 structured challenges across binary exploitation, cryptography, reverse engineering, forensics, OSINT,…

Working DoS for CVE-2025-15467 and a docker container to test against

CurveBall (CVE-2020-0601) - PoC CVE-2020-0601, or commonly referred to as CurveBall, is a vulnerability in which the signature of certificates using…

Proof-of-concept local privilege escalation tool exploiting a kernel XFRM/ESP vulnerability (CVE-2026-43503) via crafted AES-CBC encrypted payloads…

A flaw in a popular RSA implementation allows attackers to bypass key validation by supplying a modulus that appears valid but is actually factorable…

Custom vulnerable VM (Ubuntu 14.04) designed for teaching multi-stage penetration testing. Features 10 interconnected challenges across Forensics,…

Labtainers: A Docker-based cyber lab framework

MD5-Monomorphic Shellcode Packer - all payloads have the same MD5 hash

Summary of Cyber Security interview questions I have been through, hope this helps

Challenge handouts, source code, and solutions for UofTCTF 2025

Proof-of-concept exploit for CVE-2023-33242 demonstrating a bit extraction attack on the Lindell17 ECDSA protocol, enabling iterative private key…

Stack buffer overflow in PKCS#12 PBMAC1 PBKDF2 keylength (OpenSSL 3.X)

OpenSSL pocs: PKCS#12 stack overflow, CMS IV overflow, OCB infoleak [partial chain]


PoC for CVE-2020-0601 - CryptoAPI exploit

A POC OF CVE-2022-2274 (openssl)

POC exploit of CVE-2021-3345, a vulnerability in libgcrypt version 1.9.0