manifesto.txt
Our Vision
Information wants to be free.
We exist in the spaces between the lines of code.
This archive is a testament to the eternal cat-and-mouse game.
exploit_of_the_day.sh
~/$ cat target_payload
Linux Kernel 5.15 - 'Dirty Pipe' Local Privilege Escalation
By Max Kellermann
2022-03-07 00:00:00
| DATE | DESCRIPTION | PLATFORM | HITS | AUTHOR |
|---|---|---|---|---|
| 2009-06-29 |
VideoLAN VLC Media Player 0.9.9 smb:// URI Stack BOF PoC
ID: 1
Verified
|
8074 |
|
|
| 2009-06-23 |
Zen Cart 1.3.8 Remote SQL Execution Exploit
ID: 2
Verified
|
10316 |
|
|
| 2009-06-23 |
Zen Cart 1.3.8 Remote Code Execution Exploit
ID: 3
Verified
|
6694 |
|
|
| 2009-06-22 |
Bopup Communications Server 3.2.26.5460 Remote SYSTEM Exploit
ID: 4
Verified
|
5187 |
|
|
| 2009-06-22 |
MyBB <= 1.4.6 Remote Code Execution Exploit
ID: 5
Verified
|
7977 |
|
|
| 2009-06-18 |
DESlock+ 4.0.2 dlpcrypt.sys Local Kernel ring0 Code Execution Exploit
ID: 6
Verified
|
6170 |
|
| DATE | DESCRIPTION | PLATFORM | HITS | AUTHOR |
|---|---|---|---|---|
| 2009-07-01 |
ARD-9808 DVR Card Security Camera Arbitrary Config Disclosure Vuln
ID: 7
Verified
|
2242 |
|
|
| 2009-07-01 |
Green Dam Remote Change System Time Exploit
ID: 8
Verified
|
2824 |
|
|
| 2009-06-29 |
Cpanel (lastvisit.html domain) Arbitrary File Disclosure Vuln (auth)
ID: 9
Verified
|
5099 |
|
|
| 2009-06-29 |
Bopup Communications Server (3.2.26.5460) Remote BOF Exploit (SEH)
ID: 10
Verified
|
1676 |
|
|
| 2009-06-22 |
Bopup Communications Server 3.2.26.5460 Remote SYSTEM Exploit
ID: 11
Verified
|
5191 |
|
|
| 2009-06-18 |
Edraw PDF Viewer Component < 3.2.0.126 ActiveX Insecure Method Vuln
ID: 12
Verified
|
3049 |
|
| DATE | DESCRIPTION | PLATFORM | HITS | AUTHOR |
|---|---|---|---|---|
| 2022-03-07 |
Linux Kernel 5.15 - 'Dirty Pipe' Local Privilege Escalation
ID: 55
Verified
|
50200 |
|
|
| 2009-07-02 |
Oracle 10g SYS.LT.COMPRESSWORKSPACETREE SQL Injection Exploit
ID: 13
Verified
|
3089 |
|
|
| 2009-07-01 |
AudioPLUS 2.00.215 (.pls) Local Buffer Overflow Exploit (SEH)
ID: 14
Verified
|
1160 |
|
|
| 2009-07-01 |
AudioPLUS 2.00.215 (.lst & .m3u File) Local buffer Overflow (seh)
ID: 15
Verified
|
1003 |
|
|
| 2009-07-01 |
MP3-Nator 2.0 (.plf File) Universal Buffer Overflow Exploit (SEH)
ID: 16
Verified
|
1008 |
|
|
| 2009-06-30 |
TFM MMPlayer 2.0 (m3u/ppl) Universal Buffer Overflow Exploit (SEH)
ID: 17
Verified
|
1163 |
|
|
| 2009-06-29 |
HT-MP3Player 1.0 (.ht3) Universal Buffer Overflow (SEH)
ID: 18
Verified
|
1138 |
|
| DATE | DESCRIPTION | PLATFORM | HITS | AUTHOR |
|---|---|---|---|---|
| 2009-07-02 |
Rentventory Multiple Remote SQL Injection Vulnerabilities
ID: 19
Verified
|
4309 |
|
|
| 2009-07-02 |
Opial 1.0 (albumid) Remote SQL Injection Vulnerability
ID: 20
Verified
|
2627 |
|
|
| 2009-07-02 |
Opial 1.0 (Auth Bypass) Remote SQL Injection Vulnerability
ID: 21
Verified
|
2304 |
|
|
| 2009-07-02 |
conpresso 3.4.8 (detail.php) Remote Blind SQL Injection Vuln
ID: 22
Verified
|
2344 |
|
|
| 2009-07-02 |
Almnzm 2.0 Remote Blind SQL Injection Exploit
ID: 23
Verified
|
2455 |
|
|
| 2009-07-02 |
AdminLog 0.5 (valid_login) Authentication Bypass Vulnerability
ID: 24
Verified
|
2786 |
|
| DATE | DESCRIPTION | PLATFORM | HITS | AUTHOR |
|---|---|---|---|---|
| 2009-07-02 |
Apple Safari 4.x JavaScript Reload Remote Crash Exploit
ID: 25
Verified
|
2495 |
|
|
| 2009-07-01 |
ARD-9808 DVR Card Security Camera (GET Request) Remote DoS Exploit
ID: 26
Verified
|
1038 |
|
|
| 2009-07-01 |
PEamp 1.02b (.M3U File) Local Buffer Overflow PoC
ID: 27
Verified
|
898 |
|
|
| 2009-06-29 |
SCMPX 1.5.1 (.m3u File) Local Heap Overflow PoC
ID: 28
Verified
|
881 |
|
|
| 2009-06-29 |
VideoLAN VLC Media Player 0.9.9 smb:// URI Stack BOF PoC
ID: 29
Verified
|
8046 |
|
|
| 2009-06-23 |
HP Data Protector 4.00-SP1b43064 Remote Memory Leak/Dos (meta)
ID: 30
Verified
|
1583 |
|
| DATE | DESCRIPTION | PLATFORM | HITS | AUTHOR |
|---|---|---|---|---|
| 2009-07-02 |
win32 xp-sp3 beep and exitprocess shellcode 28 bytes
ID: 31
Verified
|
1965 |
|
|
| 2009-06-29 |
linux/x86 reboot() polymorphic shellcode 57 bytes
ID: 32
Verified
|
1411 |
|
|
| 2009-06-29 |
linux/x86 execve shellcode generator null byte free
ID: 33
Verified
|
706 |
|
|
| 2009-06-22 |
linux/x86 Shellcode Polymorphic chmod("/etc/shadow",666) 54 bytes
ID: 34
Verified
|
2396 |
|
|
| 2009-06-18 |
netbsd/x86 kill all processes shellcode 23 bytes
ID: 35
Verified
|
1581 |
|
|
| 2009-06-16 |
solaris/x86 portbind/tcp shellcode generator
ID: 36
Verified
|
1279 |
|
| DATE | DESCRIPTION | PLATFORM | HITS | AUTHOR |
|---|---|---|---|---|
| 2009-07-02 |
[french] Petite Explication Du SQL INJECTION
ID: 37
Verified
|
1350 |
|
|
| 2009-06-30 |
Cracking The Air, The Other Way
ID: 38
Verified
|
2889 |
|
|
| 2009-06-30 |
[romanian] Vulnerabilitati Web si securizarea acestora v1.0
ID: 39
Verified
|
703 |
|
|
| 2009-06-29 |
Linux Hardening & Security (cP/WHM + Apache)
ID: 40
Verified
|
1890 |
|
|
| 2009-06-22 |
[french] Le Social Engineering : une attaque de persuasion
ID: 41
Verified
|
1606 |
|
|
| 2009-06-22 |
PE Infection - How to Inject a dll
ID: 42
Verified
|
3355 |
|
| DATE | DESCRIPTION | PLATFORM | HITS | AUTHOR |
|---|---|---|---|---|
| 2009-06-01 |
HTTP Parameter Pollution - Yahoo! Mail classic attack
ID: 43
Verified
|
11490 |
|
|
| 2009-05-20 |
IIS WebDAV Vulnerability in Action
ID: 44
Verified
|
12466 |
|
|
| 2009-05-12 |
How to bypass Mikrotik Hotspot Login Page
ID: 45
Verified
|
13173 |
|
|
| 2009-04-30 |
Desktop Phishing (The New Art of Phishing)
ID: 46
Verified
|
20143 |
|
|
| 2009-04-27 |
A textbook example of Blind SQL Injection
ID: 47
Verified
|
14546 |
|
|
| 2009-04-23 |
BeEF and PHProxy for web MITM with content modification
ID: 48
Verified
|
6047 |
|
| DATE | DESCRIPTION | PLATFORM | HITS | AUTHOR |
|---|---|---|---|---|
| 2023-11-10 |
University Database Pwned - Root Access Gained
ID: 50
Verified
|
9038 |
|
|
| 2023-10-25 |
Mass Defacement - 50+ Subdomains Compromised
ID: 51
Verified
|
12164 |
|
|
| 2023-10-18 |
Corporate Intranet Breached - Data Dump
ID: 52
Verified
|
21495 |
|
|
| 2023-09-05 |
E-commerce Platform SQLi to RCE - Full Takeover
ID: 53
Verified
|
9612 |
|
|
| 2023-08-22 |
Local ISP Router DNS Hijack Defacement
ID: 54
Verified
|
6810 |
|