In this blog post, I will explain a vulnerability in the Microsoft Windows Desktop Windows Manager (DWM) Core library that I analyzed when the exploit for Core Impact was being developed. This vulnerability allows an unprivileged attacker to execute code as a DWM user with Integrity System privileges (CVE-2024-30051).

An index of Windows binaries, including download links for executables such as exe, dll and sys files

In my introductory post I had been talking about dynamic memory allocation and I referenced various solutions that are used to tackle this…

null

Heap corruption can be a scary topic. In this post, we go through a basic example of a heap overflow on Windows 10.

Posted by hugeh0ge, Ricerca Security NOTE: We have decided to make our PoC exclusively available to our customers to avoid abuse by scr...

Contribute to Markakd/DirtyCred development by creating an account on GitHub.

log4j rce test environment and poc. Contribute to leonjza/log4jpwn development by creating an account on GitHub.

Commit for pwnkit fix

Java deserialization exploitation lab. Contribute to NickstaDB/DeserLab development by creating an account on GitHub.

CTF framework and exploit development library. Contribute to Gallopsled/pwntools development by creating an account on GitHub.