
Windows-Kernel-Exploitation
Techniques and tools for Windows kernel exploitation, covering pool overflow exploitation, segment heap metadata abuse, and debugging scripts for…

Techniques and tools for Windows kernel exploitation, covering pool overflow exploitation, segment heap metadata abuse, and debugging scripts for…

Java安全相关的漏洞和技术demo,原生Java、Fastjson、Jackson、Hessian2、XML反序列化漏洞利用和Spring、Dubbo、Shiro、CAS、Tomcat、RMI、Nexus等框架\中间件\功能的exploits以及Java Security…

Proof-of-concept exploit for terminal escape sequence injection via malicious filenames that hides Flawfinder's scan findings; fixed in version…

This is a proof-of-concept demonstrating CVE-2020-8158, a critical prototype pollution vulnerability in TypeORM versions < 0.2.25.

https://cve.mitre.org/

Check CVE-2020-11932 (ubuntu server) and test host relating to this vulnerability

In-depth case study analyzing the 2020 Virgin Mobile KSA breach via CVE-2020-0688 exploitation, packet sniffing, and patch management failures, with…

Curated list of CVE-2020-0601 resources

Controlled vulnerability research and reproduction lab for CVE-2020-14343 in PyYAML

CVE-2020-1938-Tomcat-AJP(Ghostcat)-Analysis

simulation experiment of Curveball (CVE-2020-0601) attacks under ECQV implicit certificates with Windows-like verifiers

PoC and technical analysis for CVE-2020-12828, including reproduction steps and vulnerability details for security researchers.

Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.

PoC for CVE-2020-16012, a timing side channel in drawImage in Firefox & Chrome

Technical Write-Up on and PoC Exploit for CVE-2020-11519 and CVE-2020-11520
