
PegasusX
OS X 10.11.6 LPE PoC for CVE-2016-4655 / CVE-2016-4656

OS X 10.11.6 LPE PoC for CVE-2016-4655 / CVE-2016-4656

Non-weaponized CVE-2016-5195 (Dirty COW) analysis and validation harness with root-cause research, upstream patch review, and safe lab-only PoC for…

Whitepaper for CVE-2016-3238/MS16-087 Proof Of concept.

full exploit of pwnfest2016, slide and full text of syscan2017

Exploiting CVE-2016-4657 to JailBreak the Nintendo Switch

Deep-dive analysis and exploitation walkthrough of CVE-2016-4622, a WebKit JavaScriptCore memory disclosure vulnerability via Array.slice TOCTOU race…

Academic paper and presentation slides analyzing the Dirty COW Linux privilege escalation vulnerability (CVE-2016-5195), including exploitation…

PoC, IOCs, and detection logic for the SharePoint /_trust WS-Federation BinaryFormatter deserialization chain. Lab reconstruction covering…

Created Research Report to HeapOver flow that CVE 2016-10191

ChakraCore exploitation techniques

Document on Linux Kernal Vulnerability CVE-2016-0728 and Exploitation

CVE-2015-4852、CVE-2016-0638、CVE-2016-3510、CVE-2019-2890漏洞POC

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.


Chocobo Root (CVE-2016-8655) Analysis