
AppleDOS
Messing Apple devices on the network with CVE-2018-4407 (heap overflow in bad packet handling)

Messing Apple devices on the network with CVE-2018-4407 (heap overflow in bad packet handling)

Reptar, Downfall, Zenbleed, ZombieLoad, RIDL, Fallout, Foreshadow, Spectre, Meltdown vulnerability/mitigation checker for Linux & BSD

Automated exploit tool for CVE-2018-9206 (jQuery File Upload) with single/multi-target scanning, Tor proxy support, and output logging for…

CENG 325 - Principles of Information Security And Privacy

A technical case study and exploitation analysis of the Authentication Bypass vulnerability in TP-Link TL-WR840N firmware (CVE-2018-12633).

TP-Link TL-WR1043ND - Authenticated Remote Code Execution

Exploit code for CVE-2018-9411 for MediaCasService

CWE-Bench-Java CVE-2018-1002202 versions 1.3.2, 1.3.3

Hyland Perceptive Content Server - Denial of Service

A tool for retrieving login credentials from Netwave IP cameras using a memory dump vulnerability (CVE-2018-17240)

CVE-2018-17456漏洞复现(PoC+Exp)

Example of using revealed "Spectre" exploit (CVE-2017-5753 and CVE-2017-5715)

POC of CVE-2018-9995 written in Rust.

Conference talk analyzing CVE-2018-8453, a Windows kernel UAF and double-free vulnerability. Covers binary diffing, exploit reproduction, heap spray,…

Reproducible Docker-based demonstration of CVE-2018-1058 PostgreSQL privilege escalation via uncontrolled search path, with vulnerable and patched…

Proof-of-concept exploit for CVE-2018-5740, a denial-of-service vulnerability in BIND DNS server triggered by a crafted DNAME query, with…

CVE-2018-12386 - Firefox Sandboxed RCE Exploit for Linux (Firefox <v62.0.3)

Reproducible Docker lab for CVE-2018-15133 (Laravel Framework token unserialize RCE) with a known APP_KEY and a /poc route for testing exploit…