
chrome_v8_ndays
Chrome V8 n-day exploits that I've written.

Chrome V8 n-day exploits that I've written.

CVE-2021-3156 POC and Docker and Analysis write up

CTF pwn challenge writeup exploiting CVE-2021-4034 (pkexec) via heap manipulation, with Ghidra-based reverse engineering and a custom shelly.so…

CVE-2021-43229 Walkthrough

Command injection exploit for TP-Link Tapo C200 camera (CVE-2021-4045) providing root shell access via UART and reverse-engineered uhttpd binary…

Hands-on lab for exploiting and understanding Log4Shell (CVE-2021-44228) using Docker, Kali Linux, Burp Suite and log4j-shell-poc. For teaching and…

My take on CVE-2021-30858 for ps4 8.xx

Malicious DOCX generator exploiting CVE-2021-40444 for remote code execution via crafted Office documents, with integrated hosting server for payload…

Reverse engineering the "A Letter Before Court 4.docx" malicious files exploting cve-2021-40444

Generates malicious DOCX files exploiting CVE-2021-40444 to achieve remote code execution via crafted CAB and HTML payloads, with a built-in hosting…

Owning a tablet Amazon kept shutting down — CVE-2022-38181 write-up, four AI models, and a blog