Exploit Development

!exploitdev@infosec.pub

Established1 year ago

Sort:

Active Scaled Hot New TopAll TopYear TopMonth TopWeek TopDay

Pixel GPU Exploit: A kernel exploit for Pixel7/8 Pro with Android 14(github.com)

posted 8 months ago

ColdPints@infosec.pub

1 commentshide report

Analysis of VirtualBox CVE-2023-21987 and CVE-2023-21991(qriousec.github.io)

posted 8 months ago

ColdPints@infosec.pub

0 commentshide report

From Terminal Output to Arbitrary Remote Code Execution(blog.solidsnail.com)

posted 1 year ago

solidsnail@infosec.pub

0 commentshide report

No More Speculation: Exploiting CPU Side-Channels for Real(bughunters.google.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

Diving into Windows Remote Access Service for Pre-Auth Bugs(www.blackhat.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

iOS 17: New Version, New Acronyms(www.df-f.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

You have become the very thing you swore to destroy: Remotely exploiting an Antivirus engine(cfp.recon.cx)

posted 1 year ago

udunadan@infosec.pubM

2 commentshide report

Use Native Pointer of Function to Bypass The Latest Chrome v8 Sandbox(medium.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

In-depth Analysis of the CVE-2023-29300 Adobe ColdFusion Serialization Vulnerability(github.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

[Chrome] CVE-2023-2033(github.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

Exploiting a Flaw in Bitmap Handling in Windows User-Mode Printer Drivers(www.zerodayinitiative.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

An Introduction to Exploit Reliability(blog.isosceles.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

MSMQ QueueJumper (RCE Vulnerability): An In-Depth Technical Analysis(securityintelligence.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

Summary: MTE As Implemented(googleprojectzero.blogspot.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

All known API based kernel address leaks on Windows no longer work(twitter.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

CVE-2023-3389 - Exploiting a vulnerability in the io_uring subsystem of the Linux kernel(qyn.app)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

Escaping the Google kCTF Container with a Data-Only Exploit(h0mbre.github.io)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

The Legacy of Stagefright(blog.isosceles.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

prctl anon_vma_name: An Amusing Linux Kernel Heap Spray(starlabs.sg)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

CVE-2023-35086 POC - ASUS routers format string vulnerability [DOS](github.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

A new method for container escape using file-based DirtyCred(starlabs.sg)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

[Chrome] UAF in MLGraphXnnpack::BuildOnBackgroundThread (reward: $11000)(crbug.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

Zenbleed(lock.cmpxchg8b.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

[Chrome ITW sandbox escape] Integer overflow in SkSLVMCodeGenerator (skia)(bugs.chromium.org)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

Exploiting MikroTik RouterOS Hardware with CVE-2023-30799 - Blog - VulnCheck(vulncheck.com)

posted 1 year ago

udunadan@infosec.pubM

0 commentshide report

!exploitdev@infosec.pub

Create post

A curated community dedicated to strictly technical materials about vulnerability research, exploit development and reverse engineering.

Exploit Development

Pixel GPU Exploit: A kernel exploit for Pixel7/8 Pro with Android 14(github.com)

Analysis of VirtualBox CVE-2023-21987 and CVE-2023-21991(qriousec.github.io)

From Terminal Output to Arbitrary Remote Code Execution(blog.solidsnail.com)

No More Speculation: Exploiting CPU Side-Channels for Real(bughunters.google.com)

Diving into Windows Remote Access Service for Pre-Auth Bugs(www.blackhat.com)

iOS 17: New Version, New Acronyms(www.df-f.com)

You have become the very thing you swore to destroy: Remotely exploiting an Antivirus engine(cfp.recon.cx)

Use Native Pointer of Function to Bypass The Latest Chrome v8 Sandbox(medium.com)

In-depth Analysis of the CVE-2023-29300 Adobe ColdFusion Serialization Vulnerability(github.com)

[Chrome] CVE-2023-2033(github.com)

Exploiting a Flaw in Bitmap Handling in Windows User-Mode Printer Drivers(www.zerodayinitiative.com)

An Introduction to Exploit Reliability(blog.isosceles.com)

MSMQ QueueJumper (RCE Vulnerability): An In-Depth Technical Analysis(securityintelligence.com)

Summary: MTE As Implemented(googleprojectzero.blogspot.com)

All known API based kernel address leaks on Windows no longer work(twitter.com)

CVE-2023-3389 - Exploiting a vulnerability in the io_uring subsystem of the Linux kernel(qyn.app)

Escaping the Google kCTF Container with a Data-Only Exploit(h0mbre.github.io)

The Legacy of Stagefright(blog.isosceles.com)

prctl anon_vma_name: An Amusing Linux Kernel Heap Spray(starlabs.sg)

CVE-2023-35086 POC - ASUS routers format string vulnerability [DOS](github.com)

A new method for container escape using file-based DirtyCred(starlabs.sg)

[Chrome] UAF in MLGraphXnnpack::BuildOnBackgroundThread (reward: $11000)(crbug.com)

Zenbleed(lock.cmpxchg8b.com)

[Chrome ITW sandbox escape] Integer overflow in SkSLVMCodeGenerator (skia)(bugs.chromium.org)

Exploiting MikroTik RouterOS Hardware with CVE-2023-30799 - Blog - VulnCheck(vulncheck.com)

Exploit Development

!exploitdev@infosec.pub

Community stats

Community moderators

Infosec.Pub