huyql109 Goto Github PK

badspin

Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)

binary-exploitation

My exploits for various CTF or wargame challenges

browser-exploitation

Pwning browsers xD

bug-hunting-101

chrome-android-and-windows-0day-rce-sbx

Chrome Android and Windows 0day RCE+SBX.. DPRK

cve-2022-26717-safari-webgl-exploit

cve-2022-4262

cve-2023-36424

Windows Kernel Pool (clfs.sys) Corruption Privilege Escalation

cve-2023-46604

cve-2024-21111

Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability

hacksysextremevulnerabledriver

HackSys Extreme Vulnerable Windows Driver (HEVD)

immunefi-bug-bounty-writeups-list

curation of all(most) immunefi bug bounty writeups I could find(till now)

kernel-exploitation

My road to learning kernel exploitation ~~~

kfd

kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices.

modern-cpp-tutorial

📚 Modern C++ Tutorial: C++11/14/17/20 On the Fly | https://changkun.de/modern-cpp/

numenctf_2023

Numen Cyber Smart Contract CTF

oob_timestamp

copy of original for audit. will be remove soon

pixel_gpu_exploit

A kernel exploit for Pixel7/8 Pro with Android 14

randar-explanation

"Randar" is an exploit for Minecraft which uses LLL lattice reduction to crack the internal state of an incorrectly reused java.util.Random in the Minecraft server, then works backwards from that to locate other players currently loaded into the world.

vendor-android-cves

Collections of my POCs for android vendor CVEs

win32k-bugs

Dump of win32k POCs for bugs I've found

windbg-cheat-sheet

My personal cheat sheet for using WinDbg for kernel debugging

windbg-scripts

A bunch of JavaScript extensions for WinDbg.

zdi-24-020