marcinguy Goto Github PK

cve

A collection of proof-of-concept exploit scripts written by the STAR Labs team for various CVEs that they discovered or found by others.

cve-2019-2107

CVE-2019-2107

cve-2019-2215

CVE 2019-2215 Android Binder Use After Free

cve-2020-0022

BlueFrag experiments

cve-2020-0796

CVE-2020-0796 SMBGhost

cve-2020-10135-bias

CVE 2020-10135 a.k.a BIAS (Bluetooth Impersonation Attack)

cve-2020-15999

CVE-2020-15999

cve-2020-8597

CVE-2020-8597

cve-2021-39623

cyanogenmod-stagefright

Stagefright on CyanogenMod 12 (Android 5.0.1) on Samsung Galaxy S3 Neo+ GT-9301I

dr_checker_4_linux

Port of "DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers" to Clang/LLVM 10 and Linux Kernel

dvblast

Please send patches as pull requests.

fpicker

fpicker is a Frida-based fuzzing suite supporting various modes (including AFL++ in-process fuzzing)

frida-fuzzer

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

fuzz-introspector

Fuzz Introspector

fuzzer

Ptrace fuzzer experiments

go-rpi-rgb-led-matrix

gping

Python asynchronous ICMP ping with progressbar (gevent based)

graudit-ce

html5-attacks

HTML5 Attacks – Common/Uncommon Attack Vectors

imsi-catcher

This program show you IMSI numbers of cellphones around you.

insider

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

jquery-xss-in-html

jQuery < 3.5 Cross-Site Scripting (XSS) in html()

kernel-exploitation

Modern Kernel Stack Buffer Exploitation (4.3.5). Few code snippets and my BlueBorne exploitation experience.

kubernetes-tob-k8s-026

Directory traversal of host logs running kube-apiserver and kubelet

kubescape

Kubescape is a K8s open-source tool providing a multi-cloud K8s single pane of glass, including risk analysis, security compliance, RBAC visualizer and image vulnerabilities scanning.

libafl

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

linkedin-mining

LinkedIn Data Mining

llvm-project

The LLVM Project is a collection of modular and reusable compiler and toolchain technologies. Note: the repository does not accept github pull requests at this moment. Please submit your patches at http://reviews.llvm.org.

lop-wiedergaenger

Dynamic Loader Oriented Programming - Wiedergaenger PoC (Proof of Concept) on Ubuntu 16.04.5 LTS