
Blackhat-USA-2022-Materials
Presentation materials for my Black Hat USA 2022 Briefing and Arsenal talks

Presentation materials for my Black Hat USA 2022 Briefing and Arsenal talks

The great RSA Attacking Toolkit compiled for Windows

Black Hat Arsenal Tools Official Account

Black box penetration test — WordPress exploitation, privilege escalation via CVE-2022-0847

Automated defect verification tool for 6 dnsmasq CVEs (CVE-2026-2291, 4890, 4891, 4892, 4893, 5172)

Black-box exploit for CVE-2025-21574 targeting MySQL servers. Automates credential brute-forcing, anonymous access attempts, and triggers server…

Full black-box penetration test against SecOS:1 (VulnHub) — CSRF exploitation, privilege escalation via CVE-2015-1328 (OverlayFS), post-exploitation

A black-box (DAST) security analysis of CVE-2026-34835 focusing on external validation methodology, observable behavior, security impact, and…

Black-box penetration test against HackSudo Thor : CVE-2014-6271 Shellshock RCE through Apache mod_cgi, chained with sudo misconfiguration and bash…

CVE-2018-17553 PoC

Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards…

All the deals for InfoSec related software/tools this Black Friday

TPM vulnerability checking tool for CVE-2018-6622. This tool will be published at Black Hat Asia 2019 and Black Hat Europe 2019

Audit de sécurité Black Box d'un serveur Drupal 7. Démonstration d'une Kill Chain complète : Injection SQL (CVE-2014-3704) ➔ RCE ➔ Reverse Shell ➔…

Black-box test whether an LLM chatbot is vulnerable to markdown/HTML exfil (CVE-2025-32711 class). Spins up a sink, sends payloads, renders in…

From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras

GUI based offensive penetration testing tool (Open Source)

Zero-dollar attack surface management tool